Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 3 Mar 2014 23:26:48 +0000 (UTC)
From:      Xin LI <delphij@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org
Subject:   svn commit: r262719 - head
Message-ID:  <201403032326.s23NQmEY076202@svn.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: delphij
Date: Mon Mar  3 23:26:48 2014
New Revision: 262719
URL: http://svnweb.freebsd.org/changeset/base/262719

Log:
  Document the fact that OpenSSH default configuration requires Capsicum
  capability mode support in kernel, which have been worked around later
  but it's still recommended to have it enabled.

Modified:
  head/UPDATING

Modified: head/UPDATING
==============================================================================
--- head/UPDATING	Mon Mar  3 23:19:28 2014	(r262718)
+++ head/UPDATING	Mon Mar  3 23:26:48 2014	(r262719)
@@ -52,6 +52,16 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 11
 	has now been fixed, but any C++ applications or shared libraries built
 	between r261283 and r261801 should be recompiled.
 
+20140204:
+	OpenSSH will now ignore errors caused by kernel lacking of Capsicum
+	capability mode support.  Please note that enabling the feature in
+	kernel is still highly recommended.
+
+20140131:
+	OpenSSH is now built with sandbox support, and will use sandbox as
+	the default privilege separation method.  This requires Capsicum
+	capability mode support in kernel.
+
 20140128:
 	The libelf and libdwarf libraries have been updated to newer
 	versions from upstream. Shared library version numbers for



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201403032326.s23NQmEY076202>