7ac008cd87
- fixed url - upgrade to 7.2p2 - changing license to 2-clause BSD to match source - added gpg signature - enable support for SSHv1 protocol and discourage its usage (bsc#983307) - enable DSA by default for backward compatibility and discourage its usage (bsc#983784) [openssh-7.2p2-allow_DSS_by_default.patch] - enable trusted X11 forwarding by default [openssh-7.2p2-X11_trusted_forwarding.patch] - set UID for lastlog properly [openssh-7.2p2-lastlog.patch] - enable use of PAM by default [openssh-7.2p2-enable_PAM_by_default.patch] - copy command line arguments properly [openssh-7.2p2-saveargv-fix.patch] - do not use pthreads in PAM code [openssh-7.2p2-dont_use_pthreads_in_PAM.patch] - fix paths in documentation [openssh-7.2p2-eal3.patch] - prevent race consitions triggered by SIGALRM [openssh-7.2p2-blocksigalrm.patch] - do send and accept locale environment variables by default [openssh-7.2p2-send_locale.patch] OBS-URL: https://build.opensuse.org/request/show/415094 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openssh?expand=0&rev=106 |
||
---|---|---|
.gitattributes | ||
.gitignore | ||
cavs_driver-ssh.pl | ||
openssh-7.2p2-allow_DSS_by_default.patch | ||
openssh-7.2p2-allow_root_password_login.patch | ||
openssh-7.2p2-blocksigalrm.patch | ||
openssh-7.2p2-disable_short_DH_parameters.patch | ||
openssh-7.2p2-dont_use_pthreads_in_PAM.patch | ||
openssh-7.2p2-eal3.patch | ||
openssh-7.2p2-enable_PAM_by_default.patch | ||
openssh-7.2p2-hostname_changes_when_forwarding_X.patch | ||
openssh-7.2p2-lastlog.patch | ||
openssh-7.2p2-pam_check_locks.patch | ||
openssh-7.2p2-pts_names_formatting.patch | ||
openssh-7.2p2-remove_xauth_cookies_on_exit.patch | ||
openssh-7.2p2-seccomp_getuid.patch | ||
openssh-7.2p2-seccomp_stat.patch | ||
openssh-7.2p2-send_locale.patch | ||
openssh-7.2p2-X11_trusted_forwarding.patch | ||
openssh-7.2p2.tar.gz | ||
openssh-7.2p2.tar.gz.asc | ||
openssh-askpass-gnome.changes | ||
openssh-askpass-gnome.spec | ||
openssh.changes | ||
openssh.spec | ||
README.FIPS | ||
README.kerberos | ||
README.SUSE | ||
ssh-askpass | ||
ssh.reg | ||
sshd-gen-keys-start | ||
sshd.fw | ||
sshd.init | ||
sshd.pamd | ||
sshd.service | ||
sysconfig.ssh |
This is OpenSSH version 7.2p2 for SLE12 There are following changes in default settings of ssh client and server: * Accepting and sending of locale environment variables in protocol 2 is enabled. * PAM authentication is enabled. * root authentiation with password is enabled by default (PermitRootLogin yes). NOTE: this has security implications and is only done in order to not change behaviour of the server in an update. We strongly suggest setting this option either "prohibit-password" or even better to "no" (which disables direct remote root login entirely). * SSH protocol version 1 is enabled for maximum compatibility. NOTE: do not use protocol version 1. It is less secure then v2 and should generally be phased out. * DSA authentication is enabled by default for maximum compatibility. NOTE: do not use DSA authentication since it is being phased out for a reason - the size of DSA keys is limited by the standard to 1024 bits which cannot be considered safe any more. For more information on differences in SUSE OpenSSH package see README.FIPS