FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=releng%2F9.3 2014-03-31T14:39:56Z 2014-03-31T14:39:56Z Dag-Erling Smørgrav des@FreeBSD.org 2014-03-31T14:39:56Z urn:sha1:8445f9d73512b4333e78ed31f64eab75a676110f r256126, r257954, r261320, r261499, r263691, r263712): upgrade to OpenSSH 6.6p1 via 6.3p1, 6.4p1 and 6.5p1. Differences relative to head: - No DNSSEC support since stable/9 does not have LDNS - Sandboxing off by default, and uses rlimit instead of Capsicum - ED25519 moved to the bottom of the order of preference to avoid "new public key" warnings 2014-03-20T10:56:05Z Dag-Erling Smørgrav des@FreeBSD.org 2014-03-20T10:56:05Z urn:sha1:a0f99e6fc99e8095a750256681e75e72d53e00be MFH (r255386): make libssh private MFH (r255369, r255376, r255393, r262530): import OpenPAM Nummularia 2013-03-01T01:02:26Z Dag-Erling Smørgrav des@FreeBSD.org 2013-03-01T01:02:26Z urn:sha1:73ade74207cdb3298f2b781c29539103ceb3a30b 2012-03-29T01:46:01Z Eitan Adler eadler@FreeBSD.org 2012-03-29T01:46:01Z urn:sha1:81ebc8c88ef44f0999a453299f0f9e1080f645aa Restore the ability to use a non-standard LOCALBASE to sshd Add the ability to use a non-standard LOCALBASE to ssh Approved by: cperciva (implicit) 2010-03-09T19:16:43Z Dag-Erling Smørgrav des@FreeBSD.org 2010-03-09T19:16:43Z urn:sha1:b15c83408cb1e9b86c1895af0f097de05fc92ccf MFC after: 1 month 2009-10-01T17:12:52Z Dag-Erling Smørgrav des@FreeBSD.org 2009-10-01T17:12:52Z urn:sha1:7aee6ffee0748c4c6bd9d11bb2a90c7531244d63 2008-08-01T02:48:36Z Dag-Erling Smørgrav des@FreeBSD.org 2008-08-01T02:48:36Z urn:sha1:d4af9e693f15f5155095f38c7650b24fe74ae351 I have worked hard to reduce diffs against the vendor branch. One notable change in that respect is that we no longer prefer DSA over RSA - the reasons for doing so went away years ago. This may cause some surprises, as ssh will warn about unknown host keys even for hosts whose keys haven't changed. MFC after: 6 weeks 2008-03-05T20:58:15Z Kris Kennaway kris@FreeBSD.org 2008-03-05T20:58:15Z urn:sha1:ac188d74d602f639ecd8c4a5b5a81efa64ee0e9a that they add X11BASE=${LOCALBASE} to /etc/make.conf since X11BASE was hard-wired to the now-wrong location in old releases. However, both X11BASE and LOCALBASE have moved out of scope of src/ into ports/ now, which causes problems for upgraded users who have old make.conf files still containing the above setting. X11BASE becomes null and we instruct ssh and sshd to look for xauth in /bin/xauth where it is unlikely to be found. Instead, provide a copy of the default LOCALBASE?=/usr/local setting here. We also have to deal with the case where the user only overrides LOCALBASE and doesn't set an explicit X11BASE (in ports it will be set implicitly but not here), which will also move the location of xauth. MFC after: 3 days Reported by: rwatson 2006-05-13T21:38:16Z Dag-Erling Smørgrav des@FreeBSD.org 2006-05-13T21:38:16Z urn:sha1:9fd9594daf9457ae7b72e53860d2534f4207a23d Discussed with: ru 2006-05-13T13:47:45Z Dag-Erling Smørgrav des@FreeBSD.org 2006-05-13T13:47:45Z urn:sha1:ed22e27d8a1315950938ff1080b06b31aa0df3bb the namespace of applications which inadvertantly link in libssh (usually through pam_ssh) Suggested by: lukem@netbsd.org MFC after: 6 weeks