Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 4 Mar 2014 00:38:39 +0100
From:      Pawel Jakub Dawidek <pjd@FreeBSD.org>
To:        Dimitry Andric <dimitry@andric.com>
Cc:        src-committers@freebsd.org, svn-src-stable-10@freebsd.org, John Baldwin <jhb@freebsd.org>, svn-src-stable@freebsd.org, svn-src-all@freebsd.org, Dag-Erling =?iso-8859-1?Q?Sm=F8rgrav?= <des@FreeBSD.org>
Subject:   Re: svn commit: r262566 - in stable/10: crypto/openssh crypto/openssh/contrib/caldera crypto/openssh/contrib/cygwin crypto/openssh/contrib/redhat crypto/openssh/contrib/suse crypto/openssh/openbsd-comp...
Message-ID:  <20140303233839.GD1659@garage.freebsd.pl>
In-Reply-To: <B69240EB-11C1-47F9-9D58-B42A40DDB094@andric.com>
References:  <201402271729.s1RHT2rx075258@svn.freebsd.org> <201403031536.33679.jhb@freebsd.org> <B69240EB-11C1-47F9-9D58-B42A40DDB094@andric.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--S1BNGpv0yoYahz37
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Mar 03, 2014 at 10:47:43PM +0100, Dimitry Andric wrote:
> On 03 Mar 2014, at 21:36, John Baldwin <jhb@freebsd.org> wrote:
> > On Thursday, February 27, 2014 12:29:02 pm Dag-Erling SmXXrgrav wrote:
> >> Author: des
> >> Date: Thu Feb 27 17:29:02 2014
> >> New Revision: 262566
> >> URL: http://svnweb.freebsd.org/changeset/base/262566
> >>=20
> >> Log:
> >>  MFH (r261320): upgrade openssh to 6.5p1
> >>  MFH (r261340): enable sandboxing by default
> >=20
> > Mails on stable@ suggest that this latter change may be a bit of a POLA=
=20
> > violation as if people are using a custom kernel configuration that doe=
sn't=20
> > include CAPSICUM they are now locked out of their boxes as sshd fails. =
 It=20
> > seems that this is at least worth a note in UPDATING if not adding a=20
> > workaround to handle the case of a kernel without CAPSICUM.
>=20
> Wouldn't it be enough to merge r261499 ("Fix installations that use
> kernels without CAPABILITIES support") by pjd?

Yes, my change should be definiately merged with OpenSSH merge. If
nobody beats me to it, I should be able to merge it tomorrow.

--=20
Pawel Jakub Dawidek                       http://www.wheelsystems.com
FreeBSD committer                         http://www.FreeBSD.org
Am I Evil? Yes, I Am!                     http://mobter.com

--S1BNGpv0yoYahz37
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (FreeBSD)

iEYEARECAAYFAlMVEn8ACgkQForvXbEpPzS7fQCgnl02HPFw/0Yg8yH8o1ky52Mi
2sIAnjoF3OWfctufKZOYizkn4dBLeV4l
=m5ZN
-----END PGP SIGNATURE-----

--S1BNGpv0yoYahz37--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20140303233839.GD1659>