From owner-svn-src-all@FreeBSD.ORG Mon Mar 3 23:36:48 2014 Return-Path: Delivered-To: svn-src-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 5B5F28AD; Mon, 3 Mar 2014 23:36:48 +0000 (UTC) Received: from mail.dawidek.net (garage.dawidek.net [91.121.88.72]) by mx1.freebsd.org (Postfix) with ESMTP id 1840BF5B; Mon, 3 Mar 2014 23:36:47 +0000 (UTC) Received: from localhost (89-73-195-149.dynamic.chello.pl [89.73.195.149]) by mail.dawidek.net (Postfix) with ESMTPSA id CA5FB51C; Tue, 4 Mar 2014 00:36:46 +0100 (CET) Date: Tue, 4 Mar 2014 00:38:39 +0100 From: Pawel Jakub Dawidek To: Dimitry Andric Subject: Re: svn commit: r262566 - in stable/10: crypto/openssh crypto/openssh/contrib/caldera crypto/openssh/contrib/cygwin crypto/openssh/contrib/redhat crypto/openssh/contrib/suse crypto/openssh/openbsd-comp... Message-ID: <20140303233839.GD1659@garage.freebsd.pl> References: <201402271729.s1RHT2rx075258@svn.freebsd.org> <201403031536.33679.jhb@freebsd.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="S1BNGpv0yoYahz37" Content-Disposition: inline In-Reply-To: X-OS: FreeBSD 11.0-CURRENT amd64 User-Agent: Mutt/1.5.22 (2013-10-16) Cc: src-committers@freebsd.org, svn-src-stable-10@freebsd.org, John Baldwin , svn-src-stable@freebsd.org, svn-src-all@freebsd.org, Dag-Erling =?iso-8859-1?Q?Sm=F8rgrav?= X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Mar 2014 23:36:48 -0000 --S1BNGpv0yoYahz37 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Mar 03, 2014 at 10:47:43PM +0100, Dimitry Andric wrote: > On 03 Mar 2014, at 21:36, John Baldwin wrote: > > On Thursday, February 27, 2014 12:29:02 pm Dag-Erling SmXXrgrav wrote: > >> Author: des > >> Date: Thu Feb 27 17:29:02 2014 > >> New Revision: 262566 > >> URL: http://svnweb.freebsd.org/changeset/base/262566 > >>=20 > >> Log: > >> MFH (r261320): upgrade openssh to 6.5p1 > >> MFH (r261340): enable sandboxing by default > >=20 > > Mails on stable@ suggest that this latter change may be a bit of a POLA= =20 > > violation as if people are using a custom kernel configuration that doe= sn't=20 > > include CAPSICUM they are now locked out of their boxes as sshd fails. = It=20 > > seems that this is at least worth a note in UPDATING if not adding a=20 > > workaround to handle the case of a kernel without CAPSICUM. >=20 > Wouldn't it be enough to merge r261499 ("Fix installations that use > kernels without CAPABILITIES support") by pjd? Yes, my change should be definiately merged with OpenSSH merge. If nobody beats me to it, I should be able to merge it tomorrow. --=20 Pawel Jakub Dawidek http://www.wheelsystems.com FreeBSD committer http://www.FreeBSD.org Am I Evil? Yes, I Am! http://mobter.com --S1BNGpv0yoYahz37 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) iEYEARECAAYFAlMVEn8ACgkQForvXbEpPzS7fQCgnl02HPFw/0Yg8yH8o1ky52Mi 2sIAnjoF3OWfctufKZOYizkn4dBLeV4l =m5ZN -----END PGP SIGNATURE----- --S1BNGpv0yoYahz37--