From owner-cvs-all Thu Jul 4 11:29:27 2002 Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5389837B400; Thu, 4 Jul 2002 11:29:19 -0700 (PDT) Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id D099843E09; Thu, 4 Jul 2002 11:29:18 -0700 (PDT) (envelope-from dinoex@FreeBSD.org) Received: from freefall.freebsd.org (dinoex@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g64ITIJU023759; Thu, 4 Jul 2002 11:29:18 -0700 (PDT) (envelope-from dinoex@freefall.freebsd.org) Received: (from dinoex@localhost) by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g64ITIui023758; Thu, 4 Jul 2002 11:29:18 -0700 (PDT) Message-Id: <200207041829.g64ITIui023758@freefall.freebsd.org> From: Dirk Meyer Date: Thu, 4 Jul 2002 11:29:18 -0700 (PDT) To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/security/openssh-portable Makefile ports/security/openssh-portable/files auth2-pam-freebsd.c batch.patch patch-Makefile.in patch-auth2-chall.c patch-monitor.c patch-monitor.h patch-monitor_wrap.c patch-monitor_wrap.h patch-sshd_config X-FreeBSD-CVS-Branch: HEAD Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG dinoex 2002/07/04 11:29:18 PDT Modified files: security/openssh-portable Makefile security/openssh-portable/files batch.patch patch-sshd_config Added files: security/openssh-portable/files auth2-pam-freebsd.c patch-Makefile.in patch-auth2-chall.c patch-monitor.c patch-monitor.h patch-monitor_wrap.c patch-monitor_wrap.h Log: 'PermitRootLogin no' is the new default for the OpenSSH port. This now matches the PermitRootLogin configuration of OpenSSH in the base system. Please be aware of this when upgrading your OpenSSH port, and if truly necessary, re-enable remote root login by readjusting this option in your sshd_config. Users are encouraged to create single-purpose users with ssh keys and very narrowly defined sudo privileges instead of using root for automated tasks. - PKGNAMESUFFIX for GSSAPI set. - Merged some patches from current to improve PAM. - Fix BATCH=yes for bento. Revision Changes Path 1.50 +9 -2 ports/security/openssh-portable/Makefile 1.1 +374 -0 ports/security/openssh-portable/files/auth2-pam-freebsd.c (new) 1.4 +7 -8 ports/security/openssh-portable/files/batch.patch 1.1 +11 -0 ports/security/openssh-portable/files/patch-Makefile.in (new) 1.3 +48 -0 ports/security/openssh-portable/files/patch-auth2-chall.c (new) 1.1 +136 -0 ports/security/openssh-portable/files/patch-monitor.c (new) 1.1 +13 -0 ports/security/openssh-portable/files/patch-monitor.h (new) 1.1 +107 -0 ports/security/openssh-portable/files/patch-monitor_wrap.c (new) 1.1 +13 -0 ports/security/openssh-portable/files/patch-monitor_wrap.h (new) 1.2 +10 -2 ports/security/openssh-portable/files/patch-sshd_config To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message