fe873a1c10
next round of patches - allow X forwarding over IPv4 when IPv6 sockets is not available [openssh-7.2p2-X_forward_with_disabled_ipv6.patch] - do not write PID file when not daemonizing [openssh-7.2p2-no_fork-no_pid_file.patch] - use correct options when invoking login [openssh-7.2p2-login_options.patch] - helper application for retrieving users' public keys from an LDAP server [openssh-7.2p2-ldap.patch] - allow forcing permissions over sftp [openssh-7.2p2-sftp_force_permissions.patch] - do not perform run-time checks for OpenSSL API/ABI change [openssh-7.2p2-disable-openssl-abi-check.patch] - suggest commands for cleaning known hosts file [openssh-7.2p2-host_ident.patch] - sftp home chroot patch [openssh-7.2p2-sftp_homechroot.patch] - ssh sessions auditing [openssh-7.2p2-audit.patch] - enable seccomp sandbox on additional architectures [openssh-7.2p2-additional_seccomp_archs.patch] OBS-URL: https://build.opensuse.org/request/show/432093 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=112 |
||
---|---|---|
.gitattributes | ||
.gitignore | ||
cavs_driver-ssh.pl | ||
openssh-7.2p2-additional_seccomp_archs.patch | ||
openssh-7.2p2-allow_DSS_by_default.patch | ||
openssh-7.2p2-allow_root_password_login.patch | ||
openssh-7.2p2-audit.patch | ||
openssh-7.2p2-blocksigalrm.patch | ||
openssh-7.2p2-disable_short_DH_parameters.patch | ||
openssh-7.2p2-disable-openssl-abi-check.patch | ||
openssh-7.2p2-dont_use_pthreads_in_PAM.patch | ||
openssh-7.2p2-eal3.patch | ||
openssh-7.2p2-enable_PAM_by_default.patch | ||
openssh-7.2p2-fips.patch | ||
openssh-7.2p2-gssapi_key_exchange.patch | ||
openssh-7.2p2-host_ident.patch | ||
openssh-7.2p2-hostname_changes_when_forwarding_X.patch | ||
openssh-7.2p2-lastlog.patch | ||
openssh-7.2p2-ldap.patch | ||
openssh-7.2p2-login_options.patch | ||
openssh-7.2p2-no_fork-no_pid_file.patch | ||
openssh-7.2p2-pam_check_locks.patch | ||
openssh-7.2p2-pts_names_formatting.patch | ||
openssh-7.2p2-remove_xauth_cookies_on_exit.patch | ||
openssh-7.2p2-seccomp_getuid.patch | ||
openssh-7.2p2-seccomp_stat.patch | ||
openssh-7.2p2-seed-prng.patch | ||
openssh-7.2p2-send_locale.patch | ||
openssh-7.2p2-sftp_force_permissions.patch | ||
openssh-7.2p2-sftp_homechroot.patch | ||
openssh-7.2p2-X11_trusted_forwarding.patch | ||
openssh-7.2p2-X_forward_with_disabled_ipv6.patch | ||
openssh-7.2p2.tar.gz | ||
openssh-7.2p2.tar.gz.asc | ||
openssh-askpass-gnome.changes | ||
openssh-askpass-gnome.spec | ||
openssh.changes | ||
openssh.spec | ||
README.FIPS | ||
README.kerberos | ||
README.SUSE | ||
ssh-askpass | ||
ssh.reg | ||
sshd-gen-keys-start | ||
sshd.fw | ||
sshd.init | ||
sshd.pamd | ||
sshd.service | ||
sysconfig.ssh |
This is OpenSSH version 7.2p2 for SLE12 There are following changes in default settings of ssh client and server: * Accepting and sending of locale environment variables in protocol 2 is enabled. * PAM authentication is enabled. * root authentiation with password is enabled by default (PermitRootLogin yes). NOTE: this has security implications and is only done in order to not change behaviour of the server in an update. We strongly suggest setting this option either "prohibit-password" or even better to "no" (which disables direct remote root login entirely). * SSH protocol version 1 is enabled for maximum compatibility. NOTE: do not use protocol version 1. It is less secure then v2 and should generally be phased out. * DSA authentication is enabled by default for maximum compatibility. NOTE: do not use DSA authentication since it is being phased out for a reason - the size of DSA keys is limited by the standard to 1024 bits which cannot be considered safe any more. For more information on differences in SUSE OpenSSH package see README.FIPS