Commit Graph

517 Commits

Author SHA1 Message Date
Tomáš Mráz
5bab487cc3 - use include instead of pam_stack in pam config
- use fork+exec instead of system in scp (#168167)
- upstream patch for displaying authentication errors
2005-10-07 12:29:15 +00:00
Tomáš Mráz
de2e7a36f5 - upgrade to a new upstream version 2005-09-06 19:55:17 +00:00
Tomáš Mráz
f94d8f533f - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
- install ssh-copy-id from contrib (#88707)
2005-08-16 11:18:44 +00:00
Tomáš Mráz
fa148157e7 - don't deadlock on exit with multiple X forwarded channels (#152432)
- don't use X11 port which can't be bound on all IP families (#163732)
2005-07-27 11:42:36 +00:00
Tomáš Mráz
79c96868ce - fix small regression caused by the nologin patch (#161956)
- fix race in getpeername error checking (mindrot #1054)
2005-06-29 11:24:36 +00:00
Tomáš Mráz
8552577357 - release up 2005-06-09 19:59:04 +00:00
Tomáš Mráz
9ac1c8b26a - use only pam_nologin for nologin testing 2005-06-09 19:58:01 +00:00
Tomáš Mráz
9cf4ab1e9b - upgrade to a new upstream version
- call pam_loginuid as a pam session module
2005-06-06 19:45:23 +00:00
Tomáš Mráz
9c577134e8 - link libselinux only to sshd (#157678) 2005-05-16 17:18:02 +00:00
Tomáš Mráz
1e27c055b8 - fixed Local/RemoteForward in ssh_config.5 manpage
- fix fatal when Local/RemoteForward is used and scp run (#153258)
- don't leak user validity when using krb5 authentication
2005-04-04 09:37:28 +00:00
Tomáš Mráz
5de53f1782 - upgrade to 4.0p1
- remove obsolete groups patch
2005-03-24 12:02:37 +00:00
Elliot Lee
683f4f3371 sync 2005-03-16 21:38:56 +00:00
Nalin Dahyabhai
4f9d64ccfb rebuild so that configure can detect that krb5_init_ets is gone now 2005-02-28 23:39:06 +00:00
Tomáš Mráz
8d62bf1038 - allow password authentication when copying from remote to remote machine
(#103364)
2005-02-21 17:18:42 +00:00
Tomáš Mráz
d048f9204a - don't call syslog in signal handler 2005-02-21 17:07:55 +00:00
Nalin Dahyabhai
389c43143e s/RedHat 7.2/Red Hat Linux 7.2/ 2005-02-14 22:57:10 +00:00
Tomáš Mráz
504978bf94 - add spaces to messages in initscript (#138508) 2005-02-09 14:19:14 +00:00
Tomáš Mráz
4c55a53547 - enable trusted forwarding by default if X11 forwarding is required by
user (#137685 and duplicates)
- disable protocol 1 support by default in sshd server config (#88329)
- keep the gnome-askpass dialog above others (#69131)
2005-02-08 14:44:52 +00:00
Tomáš Mráz
5a8f6b5538 - change permissions on pam.d/sshd to 0644
- patch initscript so it doesn't kill opened sessions if the sshd daemon
    isn't running anymore
2005-02-04 13:25:38 +00:00
Nalin Dahyabhai
fe42506764 - remove mitm backward-compatibility patch for 3.8, clean up a reject hunk
for
3.9 with the showpatchlevel patch as a prerequisite
2005-02-02 23:03:55 +00:00
Bill Nottingham
ede9e0149f don't use initlog 2005-01-03 22:35:32 +00:00
Thomas Woerner
b5621277a0 [tw] - fixed PIE build for all architectures 2004-11-29 11:18:58 +00:00
Colin Walters
74ed232396 document ACSS removal a bit better 2004-11-14 07:20:02 +00:00
Nalin Dahyabhai
8ccaa9f09c - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel
option to enable display of a vendor patch level during version
    exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages
2004-10-04 20:57:32 +00:00
Bill Nottingham
c92dff46d2 don't buildprereq gnome-libs 2004-09-20 22:10:11 +00:00
Nalin Dahyabhai
567e63cdab bump release for build 2004-09-14 22:08:22 +00:00
Nalin Dahyabhai
deb1e497fe - switch to a modified tarball, as we did for OpenSSL, for removing ACSS
support
2004-09-13 19:39:41 +00:00
Daniel J Walsh
c82df74ea6 use get_default_context_with_role 2004-09-09 20:44:41 +00:00
cvsdist
29a4bfd130 auto-import changelog data from openssh-3.9p1-3.src.rpm
Thu Sep 02 2004 Daniel Walsh <dwalsh@redhat.com> 3.9p1-3
- Modify Colin Walter's patch to allow specifying rule during connection
2004-09-09 09:49:02 +00:00
cvsdist
d7affcf4ff auto-import changelog data from openssh-3.9p1-2.src.rpm
Tue Aug 31 2004 Daniel Walsh <dwalsh@redhat.com> 3.9p1-2
- Fix TTY handling for SELinux
2004-09-09 09:48:56 +00:00
cvsdist
653818f432 auto-import changelog data from openssh-3.9p1-1.src.rpm
Tue Aug 24 2004 Daniel Walsh <dwalsh@redhat.com> 3.9p1-1
- Update to upstream
2004-09-09 09:48:39 +00:00
cvsdist
5ef607308f auto-import changelog data from openssh-3.8.1p1-5.src.rpm
Sun Aug 01 2004 Alan Cox <alan@redhat.com> 3.8.1p1-5
- Apply buildreq fixup patch (#125296)
2004-09-09 09:48:29 +00:00
cvsdist
9d5a538b75 auto-import openssh-3.8.1p1-4 from openssh-3.8.1p1-4.src.rpm 2004-09-09 09:48:26 +00:00
cvsdist
de28cc3259 auto-import changelog data from openssh-3.8.1p1-3.src.rpm
Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
2004-09-09 09:48:02 +00:00
cvsdist
e965c757ac auto-import changelog data from openssh-3.8.1p1-2.src.rpm
Wed Jun 09 2004 Daniel Walsh <dwalsh@redhat.com> 3.8.1p1-2
- Remove use of pam_selinux and patch selinux in directly.
2004-09-09 09:47:48 +00:00
cvsdist
ffdec57ae7 auto-import changelog data from openssh-3.8.1p1-1.src.rpm
Mon Jun 07 2004 Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
- request gssapi-with-mic by default but not delegation (flag day for
    anyone who used previous gssapi patches)
- no longer request x11 forwarding by default
2004-09-09 09:47:30 +00:00
cvsdist
162c7f9a43 auto-import changelog data from openssh-3.6.1p2-36.src.rpm
Thu Jun 03 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-36
- Change pam file to use open and close with pam_selinux
2004-09-09 09:47:11 +00:00
cvsdist
73e10ec628 auto-import changelog data from openssh-3.6.1p2-35.src.rpm
Tue Jun 01 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-35
- Remove CLOSEXEC on STDERR
2004-09-09 09:47:06 +00:00
cvsdist
8f87201b9c auto-import changelog data from openssh-3.6.1p2-34.src.rpm
Tue Mar 16 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.
Wed Mar 03 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-33
- Close file descriptors on exec
Mon Mar 01 2004 Thomas Woerner <twoerner@redhat.com> 3.6.1p2-32
- fixed pie build
Thu Feb 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-31
- Add restorecon to startup scripts
Thu Feb 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-30
- Add multiple qualified to openssh
Mon Feb 23 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-29
- Eliminate selinux code and use pam_selinux
Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
2004-09-09 09:46:59 +00:00
cvsdist
fe98d869ff auto-import changelog data from openssh-3.6.1p2-27.src.rpm
Mon Jan 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-27
- turn off pie on ppc
Mon Jan 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-26
- fix is_selinux_enabled
Wed Jan 14 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-25
- Rebuild to grab shared libselinux
Wed Dec 03 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-24
- turn on selinux
Tue Nov 18 2003 Nalin Dahyabhai <nalin@redhat.com>
- un#ifdef out code for reporting password expiration in non-privsep mode
    (#83585)
Mon Nov 10 2003 Nalin Dahyabhai <nalin@redhat.com>
- add machinery to build with/without -fpie/-pie, default to doing so
Thu Nov 06 2003 David Woodhouse <dwmw2@redhat.com> 3.6.1p2-23
- Don't whinge about getsockopt failing (#109161)
Fri Oct 24 2003 Nalin Dahyabhai <nalin@redhat.com>
- add missing buildprereq on zlib-devel (#104558)
Mon Oct 13 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-22
- turn selinux off
Mon Oct 13 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-21.sel
- turn selinux on
Fri Sep 19 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-21
- turn selinux off
Fri Sep 19 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-20.sel
- turn selinux on
Fri Sep 19 2003 Nalin Dahyabhai <nalin@redhat.com>
- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1
2004-09-09 09:45:31 +00:00
cvsdist
092b0a177d auto-import openssh-3.6.1p2-19 from openssh-3.6.1p2-19.src.rpm 2004-09-09 09:44:54 +00:00
cvsdist
9037309398 auto-import changelog data from openssh-3.5p1-11.src.rpm
Wed Sep 17 2003 Nalin Dahyabhai <nalin@redhat.com> 3.5p1-11
- additional buffer manipulation cleanups from Solar Designer
- this update goes to 11
2004-09-09 09:44:29 +00:00
cvsdist
44a5d2bda0 auto-import openssh-3.5p1-10 from openssh-3.5p1-10.src.rpm 2004-09-09 09:43:57 +00:00
cvsdist
6eaa41ea46 auto-import openssh-3.5p1-9 from openssh-3.5p1-9.src.rpm 2004-09-09 09:43:51 +00:00
cvsdist
6c4a0be712 auto-import openssh-3.5p1-6.9 from openssh-3.5p1-6.9.src.rpm 2004-09-09 09:43:44 +00:00
cvsdist
3e66bdcf29 auto-import openssh-3.5p1-6 from openssh-3.5p1-6.src.rpm 2004-09-09 09:43:25 +00:00
cvsdist
8180003648 auto-import openssh-3.4p1-5 from openssh-3.4p1-5.src.rpm 2004-09-09 09:43:13 +00:00
cvsdist
e98831d3c0 auto-import openssh-3.4p1-2 from openssh-3.4p1-2.src.rpm 2004-09-09 09:43:09 +00:00
cvsdist
8264e71c40 auto-import openssh-3.4p1-1 from openssh-3.4p1-1.src.rpm 2004-09-09 09:43:04 +00:00
cvsdist
7c1cbd34c7 auto-import changelog data from openssh-3.1p1-10.src.rpm
Tue Sep 16 2003 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-10
- rebuild
Tue Sep 16 2003 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-9
- apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)
Fri Jul 04 2003 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-8
- rebuild
Thu Jun 05 2003 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-7
- backport patch to close timing attacks when PAM authentication is
    short-circuited by other checks
2004-09-09 09:42:23 +00:00