Petr Lautrbach
d3d59da0b5
merge all -audit* patches together
2013-04-08 17:17:10 +02:00
Petr Lautrbach
8d97022c57
build regress/modpipe tests with $(CFLAGS)
2013-04-04 16:50:06 +02:00
Petr Lautrbach
8a29dedfa7
rebase to openssh-6.2p1 ( #924727 )
...
ACSS was removed from upstream sources
2013-04-04 16:49:30 +02:00
Petr Lautrbach
811ec1dd36
allow specification of alternate host key location(s) via /etc/sysconfig/sshd
...
<john_florian@dart.biz> (#865803 )
2013-03-26 15:43:28 +01:00
Petr Lautrbach
1b95bc38df
6.1p1-7 + 0.9.3-3
2013-03-06 10:41:50 +01:00
Petr Lautrbach
338e71981d
use SELinux type sshd_net_t for [net] childs ( #915085 )
2013-03-06 10:40:28 +01:00
Petr Lautrbach
2a7883d153
6.1p1-6 + 0.9.3-3
2013-02-14 18:08:21 +01:00
Petr Lautrbach
c9e43cd2f8
fix AuthorizedKeysCommand option and adopt latest upstream changes
2013-02-14 18:06:17 +01:00
Petr Lautrbach
d2b3b9a27e
pam_ssh_agent_auth - change paths from %{_lib} to %{_libdir}
2013-02-12 09:42:54 +01:00
Petr Lautrbach
19725a9954
fix bogus day names in changelog dates
2013-02-08 15:44:40 +01:00
Petr Lautrbach
cab7f53408
6.1p1-5 + 0.9.3-3
2013-02-08 14:56:47 +01:00
Petr Lautrbach
5bc906c19a
change default value of MaxStartups - CVE-2010-5107 - #908707
2013-02-08 14:32:20 +01:00
Petr Lautrbach
87391b7d01
add BuildRequires: perl-podlators
2013-02-07 14:21:38 +01:00
Petr Lautrbach
7642de98e4
6.1p1-4 + 0.9.3-3
2012-12-03 17:16:39 +01:00
Petr Lautrbach
4dbe32e492
fix segfault in openssh-5.8p2-force_krb.patch ( #882541 )
2012-12-03 17:02:10 +01:00
Petr Lautrbach
790103e764
6.1p1-3 + 0.9.3-3
2012-12-03 10:29:07 +01:00
Petr Lautrbach
f578f0ac16
fix privsep patch
...
the selinux-policy removed rules which allow SELinux users to use setuid()
so we can't do setcon() before setuid()
2012-12-03 10:25:26 +01:00
Petr Lautrbach
fe661c5cbb
obsolete RequiredAuthentications[12] options
2012-11-30 21:40:22 +01:00
Petr Lautrbach
283f3afe27
remove unused openssh-5.9p1-2auth.patch
2012-11-30 16:26:19 +01:00
Petr Lautrbach
5039c7c85d
reformat several patches after openssh-6.1p1-authenticationmethods.patch
2012-11-30 16:25:51 +01:00
Petr Lautrbach
bffd1c2234
replace RequiredAuthentications2 with AuthenticationMethods according to upstream
...
the upstream refused original patch with RequiredAuthentications2, but they came with their own implementation of required authentications,
see https://bugzilla.mindrot.org/show_bug.cgi?id=983 . The new method is more robust and flexible
it will be included in next openssh-6.2 release
2012-11-30 16:23:29 +01:00
Petr Lautrbach
e75a99b5f3
remove unused patches
2012-11-27 15:01:12 +01:00
Petr Lautrbach
251c8dbdae
fix warnings in ssh-add and sshd_config man pages
2012-11-12 13:58:36 +01:00
Petr Lautrbach
20d541d728
fix the required authentications patch ( #872608 )
2012-11-08 15:24:56 +01:00
Petr Lautrbach
ab30b92bd6
fix the man moduli page ( #841065 )
2012-11-06 09:59:17 +01:00
bach
dfa0cd5146
avoid xfree(NULL) in ssh_selinux_copy_context() ( #789502 )
2012-11-05 16:18:52 +01:00
bach
f7f8b483b0
adapt openssh-6.1p1-akc.patch to the upstream version - https://bugzilla.mindrot.org/show_bug.cgi?id=1663
2012-11-05 14:43:22 +01:00
Petr Lautrbach
52c8eca4d9
fix gssapi canohost patch ( #863350 )
2012-10-30 11:06:45 +01:00
Petr Lautrbach
af2ebf77dc
6.1p1-2 + 0.9.3-3
2012-10-26 17:15:55 +02:00
Petr Lautrbach
afd52c4857
drop openssh-5.9p1-sftp-chroot.patch ( #830237 )
2012-10-26 17:04:25 +02:00
Petr Lautrbach
470ebd7abc
add SELinux comment to /etc/ssh/sshd_config about SELinux command to modify port ( #861400 )
2012-10-26 16:34:55 +02:00
Petr Lautrbach
13cf2478d6
smartcard support is replaced with PKCS#11 support already in 5.4p1 https://bugzilla.mindrot.org/show_bug.cgi?id=1371
2012-10-26 15:42:59 +02:00
Petr Lautrbach
1a5c95ee57
drop required chkconfig ( #865498 )
2012-10-12 13:03:26 +02:00
Petr Lautrbach
e7c6eb2640
remove openssh-6.0p1-noacss.tar.bz2 from sources
2012-09-15 14:31:24 +02:00
Petr Lautrbach
0512a0153c
upload openssh-6.1p1-noacss.tar.bz2 to cache
2012-09-15 14:30:18 +02:00
Petr Lautrbach
d0630aa358
6.1p1-1 + 0.9.3-3
2012-09-15 13:48:14 +02:00
Petr Lautrbach
fd408ed2a5
to run tests use --with check
2012-09-15 13:48:13 +02:00
Petr Lautrbach
e58e548a57
don't use /bin and /sbin paths ( #856590 )
2012-09-15 13:48:13 +02:00
Petr Lautrbach
581bf30d07
don't use chroot_user_t for chrooted users ( #830237 )
2012-09-15 13:47:45 +02:00
Petr Lautrbach
9fe1afc163
rebase to openssh-6.1p1 ( #852651 )
2012-09-15 13:29:49 +02:00
Petr Lautrbach
51ca3be245
use DIR: kerberos cache type ( #848228 )
2012-09-15 13:28:23 +02:00
Petr Lautrbach
94943d59db
replace scriptlets with systemd macros ( #850249 )
2012-09-15 13:28:01 +02:00
Petr Lautrbach
65ba94ef1a
rebase to openssh-6.0p1
...
6.0p1-1 + 0.9.3-2
2012-08-06 21:33:33 +02:00
Petr Lautrbach
90e11f338c
5.9p1-26 + 0.9.3-1
2012-08-06 19:42:13 +02:00
Petr Lautrbach
5382ccbe9b
handle crypt() returning NULL ( #815993 )
2012-08-06 09:08:52 +02:00
Petr Lautrbach
0c438f5bc5
openssh-5.9p1-privsep-selinux.patch - change SELinux context also for
...
root user (#827109 )
2012-08-06 08:58:30 +02:00
Petr Lautrbach
b648890ead
5.9p1-25 + 0.9.3-1
2012-07-27 14:35:43 +02:00
Petr Lautrbach
420ff03c91
removed dead code and fixed segfault in openssh-5.9p1-required-authentications.patch
2012-07-27 14:35:20 +02:00
Tomas Mraz
e9620308c8
allow sha256 and sha512 hmacs in the FIPS mode
2012-07-17 21:03:59 +02:00
Tomas Mraz
4f4687ce80
fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
...
is not running, most probably not exploitable
update pam_ssh_agent_auth to 0.9.3 upstream version
2012-06-22 14:52:35 +02:00