forked from erlang/erlang
Simon Lees
da6d076938
* ssh: SFTP packets exceeding max packet size are not processed
and dropped.
* snmp: SNMP Agent transports type (intAgentTransports) was
incorrectly not documented as a list of transports. Also add a
couple of config file generation examples.
- Changes for 27.2.3:
* inets: Improved robustness of httpd startup procedure.
* ssl: Setting protocol version to a lower value then supported
by default in server API function called after ssl:listen/2
could result in wrong default values being used and connections
failing with insufficient security.
* ssl: Improve error handling of server name indication fun. This
implies that if the sni_fun returns undefined we will attempt
connection with original option values, if it returns
unrecognized we end the connection with UNRECOGNIZED_NAME alert
and if provided options fail option verification we will end
the connection with a HANDSHAKE_FAILURE and an error log.
- Changes for 27.2.2:
* compiler: Eliminated a bug in the alias analysis pass that
could potentially cause unsafe optimizations of binary
construction or record updates.
* erts: Disabled an unsafe runtime optimization in binary
construction that caused silent memory corruption.
* public_key: Consider keyCertSign to compatible with extended
key usage for TLS client/server auth in CAs, adhere to wide
spread implementations
* kernel: Fixed a couple of bugs that could make global's
internal state inconsistent when a connection was reconnected.
* ssl: An initiated handshake should always be closed with an
OBS-URL: https://build.opensuse.org/package/show/devel:languages:erlang:Factory/erlang?expand=0&rev=144
35 lines
709 B
Desktop File
35 lines
709 B
Desktop File
[Unit]
|
|
Description=Erlang Port Mapper Daemon
|
|
After=network.target
|
|
Requires=epmd.socket
|
|
|
|
[Service]
|
|
# added automatically, for details please see
|
|
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
ProtectSystem=full
|
|
ProtectHome=true
|
|
PrivateDevices=true
|
|
ProtectHostname=true
|
|
ProtectClock=true
|
|
ProtectKernelTunables=true
|
|
ProtectKernelModules=true
|
|
ProtectKernelLogs=true
|
|
ProtectControlGroups=true
|
|
RestrictRealtime=true
|
|
# end of automatic additions
|
|
ExecStart=/usr/bin/epmd -systemd
|
|
#ExecStop=/usr/bin/epmd -kill
|
|
Type=simple
|
|
StandardOutput=journal
|
|
StandardError=journal
|
|
Restart=always
|
|
LimitNPROC=1
|
|
LimitFSIZE=0
|
|
User=epmd
|
|
Group=epmd
|
|
|
|
[Install]
|
|
Also=epmd.socket
|
|
WantedBy=multi-user.target
|
|
|