Commit Graph

361 Commits

Author SHA1 Message Date
Tomáš Mráz
9ac1c8b26a - use only pam_nologin for nologin testing 2005-06-09 19:58:01 +00:00
Tomáš Mráz
9cf4ab1e9b - upgrade to a new upstream version
- call pam_loginuid as a pam session module
2005-06-06 19:45:23 +00:00
Tomáš Mráz
9c577134e8 - link libselinux only to sshd (#157678) 2005-05-16 17:18:02 +00:00
Tomáš Mráz
1e27c055b8 - fixed Local/RemoteForward in ssh_config.5 manpage
- fix fatal when Local/RemoteForward is used and scp run (#153258)
- don't leak user validity when using krb5 authentication
2005-04-04 09:37:28 +00:00
Tomáš Mráz
5de53f1782 - upgrade to 4.0p1
- remove obsolete groups patch
2005-03-24 12:02:37 +00:00
Elliot Lee
683f4f3371 sync 2005-03-16 21:38:56 +00:00
Nalin Dahyabhai
4f9d64ccfb rebuild so that configure can detect that krb5_init_ets is gone now 2005-02-28 23:39:06 +00:00
Tomáš Mráz
8d62bf1038 - allow password authentication when copying from remote to remote machine
(#103364)
2005-02-21 17:18:42 +00:00
Tomáš Mráz
d048f9204a - don't call syslog in signal handler 2005-02-21 17:07:55 +00:00
Nalin Dahyabhai
389c43143e s/RedHat 7.2/Red Hat Linux 7.2/ 2005-02-14 22:57:10 +00:00
Tomáš Mráz
504978bf94 - add spaces to messages in initscript (#138508) 2005-02-09 14:19:14 +00:00
Tomáš Mráz
4c55a53547 - enable trusted forwarding by default if X11 forwarding is required by
user (#137685 and duplicates)
- disable protocol 1 support by default in sshd server config (#88329)
- keep the gnome-askpass dialog above others (#69131)
2005-02-08 14:44:52 +00:00
Tomáš Mráz
5a8f6b5538 - change permissions on pam.d/sshd to 0644
- patch initscript so it doesn't kill opened sessions if the sshd daemon
    isn't running anymore
2005-02-04 13:25:38 +00:00
Nalin Dahyabhai
fe42506764 - remove mitm backward-compatibility patch for 3.8, clean up a reject hunk
for
3.9 with the showpatchlevel patch as a prerequisite
2005-02-02 23:03:55 +00:00
Bill Nottingham
ede9e0149f don't use initlog 2005-01-03 22:35:32 +00:00
Thomas Woerner
b5621277a0 [tw] - fixed PIE build for all architectures 2004-11-29 11:18:58 +00:00
Colin Walters
74ed232396 document ACSS removal a bit better 2004-11-14 07:20:02 +00:00
Nalin Dahyabhai
8ccaa9f09c - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel
option to enable display of a vendor patch level during version
    exchange (#120285)
- configure with --disable-strip to build useful debuginfo subpackages
2004-10-04 20:57:32 +00:00
Bill Nottingham
c92dff46d2 don't buildprereq gnome-libs 2004-09-20 22:10:11 +00:00
Nalin Dahyabhai
567e63cdab bump release for build 2004-09-14 22:08:22 +00:00
Nalin Dahyabhai
deb1e497fe - switch to a modified tarball, as we did for OpenSSL, for removing ACSS
support
2004-09-13 19:39:41 +00:00
Daniel J Walsh
c82df74ea6 use get_default_context_with_role 2004-09-09 20:44:41 +00:00
cvsdist
29a4bfd130 auto-import changelog data from openssh-3.9p1-3.src.rpm
Thu Sep 02 2004 Daniel Walsh <dwalsh@redhat.com> 3.9p1-3
- Modify Colin Walter's patch to allow specifying rule during connection
2004-09-09 09:49:02 +00:00
cvsdist
d7affcf4ff auto-import changelog data from openssh-3.9p1-2.src.rpm
Tue Aug 31 2004 Daniel Walsh <dwalsh@redhat.com> 3.9p1-2
- Fix TTY handling for SELinux
2004-09-09 09:48:56 +00:00
cvsdist
653818f432 auto-import changelog data from openssh-3.9p1-1.src.rpm
Tue Aug 24 2004 Daniel Walsh <dwalsh@redhat.com> 3.9p1-1
- Update to upstream
2004-09-09 09:48:39 +00:00
cvsdist
5ef607308f auto-import changelog data from openssh-3.8.1p1-5.src.rpm
Sun Aug 01 2004 Alan Cox <alan@redhat.com> 3.8.1p1-5
- Apply buildreq fixup patch (#125296)
2004-09-09 09:48:29 +00:00
cvsdist
9d5a538b75 auto-import openssh-3.8.1p1-4 from openssh-3.8.1p1-4.src.rpm 2004-09-09 09:48:26 +00:00
cvsdist
de28cc3259 auto-import changelog data from openssh-3.8.1p1-3.src.rpm
Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
2004-09-09 09:48:02 +00:00
cvsdist
e965c757ac auto-import changelog data from openssh-3.8.1p1-2.src.rpm
Wed Jun 09 2004 Daniel Walsh <dwalsh@redhat.com> 3.8.1p1-2
- Remove use of pam_selinux and patch selinux in directly.
2004-09-09 09:47:48 +00:00
cvsdist
ffdec57ae7 auto-import changelog data from openssh-3.8.1p1-1.src.rpm
Mon Jun 07 2004 Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
- request gssapi-with-mic by default but not delegation (flag day for
    anyone who used previous gssapi patches)
- no longer request x11 forwarding by default
2004-09-09 09:47:30 +00:00
cvsdist
162c7f9a43 auto-import changelog data from openssh-3.6.1p2-36.src.rpm
Thu Jun 03 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-36
- Change pam file to use open and close with pam_selinux
2004-09-09 09:47:11 +00:00
cvsdist
73e10ec628 auto-import changelog data from openssh-3.6.1p2-35.src.rpm
Tue Jun 01 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-35
- Remove CLOSEXEC on STDERR
2004-09-09 09:47:06 +00:00
cvsdist
8f87201b9c auto-import changelog data from openssh-3.6.1p2-34.src.rpm
Tue Mar 16 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
- Built RHLE3 U2 update package.
Wed Mar 03 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-33
- Close file descriptors on exec
Mon Mar 01 2004 Thomas Woerner <twoerner@redhat.com> 3.6.1p2-32
- fixed pie build
Thu Feb 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-31
- Add restorecon to startup scripts
Thu Feb 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-30
- Add multiple qualified to openssh
Mon Feb 23 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-29
- Eliminate selinux code and use pam_selinux
Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
2004-09-09 09:46:59 +00:00
cvsdist
fe98d869ff auto-import changelog data from openssh-3.6.1p2-27.src.rpm
Mon Jan 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-27
- turn off pie on ppc
Mon Jan 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-26
- fix is_selinux_enabled
Wed Jan 14 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-25
- Rebuild to grab shared libselinux
Wed Dec 03 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-24
- turn on selinux
Tue Nov 18 2003 Nalin Dahyabhai <nalin@redhat.com>
- un#ifdef out code for reporting password expiration in non-privsep mode
    (#83585)
Mon Nov 10 2003 Nalin Dahyabhai <nalin@redhat.com>
- add machinery to build with/without -fpie/-pie, default to doing so
Thu Nov 06 2003 David Woodhouse <dwmw2@redhat.com> 3.6.1p2-23
- Don't whinge about getsockopt failing (#109161)
Fri Oct 24 2003 Nalin Dahyabhai <nalin@redhat.com>
- add missing buildprereq on zlib-devel (#104558)
Mon Oct 13 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-22
- turn selinux off
Mon Oct 13 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-21.sel
- turn selinux on
Fri Sep 19 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-21
- turn selinux off
Fri Sep 19 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-20.sel
- turn selinux on
Fri Sep 19 2003 Nalin Dahyabhai <nalin@redhat.com>
- additional fix for apparently-never-happens double-free in buffer_free()
- extend fix for #103998 to cover SSH1
2004-09-09 09:45:31 +00:00
cvsdist
092b0a177d auto-import openssh-3.6.1p2-19 from openssh-3.6.1p2-19.src.rpm 2004-09-09 09:44:54 +00:00
cvsdist
9037309398 auto-import changelog data from openssh-3.5p1-11.src.rpm
Wed Sep 17 2003 Nalin Dahyabhai <nalin@redhat.com> 3.5p1-11
- additional buffer manipulation cleanups from Solar Designer
- this update goes to 11
2004-09-09 09:44:29 +00:00
cvsdist
44a5d2bda0 auto-import openssh-3.5p1-10 from openssh-3.5p1-10.src.rpm 2004-09-09 09:43:57 +00:00
cvsdist
6eaa41ea46 auto-import openssh-3.5p1-9 from openssh-3.5p1-9.src.rpm 2004-09-09 09:43:51 +00:00
cvsdist
6c4a0be712 auto-import openssh-3.5p1-6.9 from openssh-3.5p1-6.9.src.rpm 2004-09-09 09:43:44 +00:00
cvsdist
3e66bdcf29 auto-import openssh-3.5p1-6 from openssh-3.5p1-6.src.rpm 2004-09-09 09:43:25 +00:00
cvsdist
8180003648 auto-import openssh-3.4p1-5 from openssh-3.4p1-5.src.rpm 2004-09-09 09:43:13 +00:00
cvsdist
e98831d3c0 auto-import openssh-3.4p1-2 from openssh-3.4p1-2.src.rpm 2004-09-09 09:43:09 +00:00
cvsdist
8264e71c40 auto-import openssh-3.4p1-1 from openssh-3.4p1-1.src.rpm 2004-09-09 09:43:04 +00:00
cvsdist
7c1cbd34c7 auto-import changelog data from openssh-3.1p1-10.src.rpm
Tue Sep 16 2003 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-10
- rebuild
Tue Sep 16 2003 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-9
- apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
- skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)
Fri Jul 04 2003 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-8
- rebuild
Thu Jun 05 2003 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-7
- backport patch to close timing attacks when PAM authentication is
    short-circuited by other checks
2004-09-09 09:42:23 +00:00
cvsdist
a423ec309e auto-import openssh-3.1p1-6 from openssh-3.1p1-6.src.rpm 2004-09-09 09:41:36 +00:00
cvsdist
0c110503e6 auto-import openssh-3.1p1-3 from openssh-3.1p1-3.src.rpm 2004-09-09 09:40:40 +00:00
cvsdist
8f631f8125 auto-import changelog data from openssh-3.1p1-2s.1.src.rpm
Tue Mar 18 2003 D. Marlin <dmarlin@redhat.com>
- new s390 release number and rebuild for s390 (bug #85960)
2004-09-09 09:39:52 +00:00
cvsdist
b46e395eb0 auto-import changelog data from openssh-3.1p1-2.src.rpm
Thu Mar 07 2002 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2
- bump and grind (through the build system)
Thu Mar 07 2002 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
- require sharutils for building (mindrot #137)
- require db1-devel only when building for 6.x (#55105), which probably
    won't work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the
    heck
- require pam-devel by file (not by package name) again
- add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x
Thu Mar 07 2002 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-0
- update to 3.1p1
Tue Mar 05 2002 Nalin Dahyabhai <nalin@redhat.com> SNAP-20020305
- update to SNAP-20020305
- drop debug patch, fixed upstream
Wed Feb 20 2002 Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
- update to SNAP-20020220 for testing purposes (you've been warned, if
    there's anything to be warned about, gss patches won't apply, I don't
    mind)
Wed Feb 13 2002 Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support
Wed Jan 23 2002 Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-2
- remove dependency on db1-devel, which has just been swallowed up whole by
    gnome-libs-devel
Sat Dec 29 2001 Nalin Dahyabhai <nalin@redhat.com>
- adjust build dependencies so that build6x actually works right (fix from
    Hugo van der Kooij)
Tue Dec 04 2001 Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-1
- update to 3.0.2p1
2004-09-09 09:39:27 +00:00
cvsdist
d92638e756 auto-import changelog data from openssh-2.9p2-12.src.rpm
Mon Dec 03 2001 Nalin Dahyabhai <nalin@redhat.com> 2.9p2-12
- add patch to fix UseLogin vulnerability from advisory by Markus
2004-09-09 09:38:40 +00:00
cvsdist
55bc91d6cf auto-import changelog data from openssh-2.9p2-11.src.rpm
Thu Nov 15 2001 Nalin Dahyabhai <nalin@redhat.com> 2.9p2-11
- pull cvs patch to use do_exec for processing more commands (heads-up from
    Markus)
Wed Nov 14 2001 Nalin Dahyabhai <nalin@redhat.com>
- pull cvs patch to stop sending fake dummy packets on carriage return
    (heads-up from Solar Designer, bug reported originally by Yang Yu)
Fri Nov 09 2001 Nalin Dahyabhai <nalin@redhat.com> 2.9p2-10
- pull cvs patch to make forced commands override subsystem invocations
    also
2004-09-09 09:38:17 +00:00