Commit graph

109 commits

Author SHA1 Message Date
Your Name
c08ab306fc Add .gitignore and .gitea/workflows/ci.yml
Some checks failed
Run CI/CD... / main (push) Has been cancelled
2025-01-31 15:12:02 +00:00
d244531a90 Добавление .gitignore и .gitea/workflows/ci.yml 2025-01-07 23:03:58 +03:00
2a274d2590 9.6p1 2024-06-10 22:44:02 +00:00
27a5d5439a Merge pull request #1 from djam/openssh:rosa2021.1
Backports and update
2024-06-10 22:38:48 +00:00
slava86
7d9ac54d2d fix compilation for e2k
lcc: "ssh-add.c", line 820: error #1441: complex integral types are not
          supported
  	size_t ndest_constraints = 0i, ncerts = 0;
  	                            ^
1 error detected in the compilation of "ssh-add.c".
2024-02-29 11:45:35 +00:00
slava86
c422c78ca8 update to 9.6p1 security fixed:
CVE-2023-51385
CVE-2023-48795
CVE-2023-51384
2024-02-29 11:03:08 +00:00
survolog (Andrey Grigorev)
0f6ac828a0 Revert usermove 2023-12-11 18:40:51 +03:00
survolog (Andrey Grigorev)
4e766b1c53 Fix e2k build 2023-11-06 15:31:19 +03:00
survolog (Andrey Grigorev)
2f37f5a14e Update to 9.5p1 2023-11-06 15:17:50 +03:00
Andrey Grigorev
70899365d9 Move into /usr 2023-10-18 14:31:11 +00:00
Andrey Grigorev
ee133f87e1 Move into /usr 2023-10-18 14:22:56 +00:00
Andrey Grigorev
e267601b10 Rebuild with libfido2 2022-10-27 10:47:52 +00:00
Mikhail Novosyolov
45bb0b70f5 Add directory for drop-in configs
Will be used in abf.io/import/sconfigs and may be in sssd/freeipa
2022-04-27 13:32:49 +03:00
Mikhail Novosyolov
09d399730c fix files listed twice 2021-11-12 18:40:38 +03:00
Mikhail Novosyolov
8934f3983b Add compat symlink to sshd-keygen
RHEL docs suggest the following:

```
%post --log=/root/ks-post.log
/usr/libexec/openssh/sshd-keygen rsa
/usr/sbin/ipa-client-install --hostname=client.example.com --domain=EXAMPLE.COM --enable-dns-updates --mkhomedir -w secret --realm=EXAMPLE.COM --server=server.example.com
```

Let's be compatible with them.
2021-11-12 18:32:55 +03:00
Mikhail Novosyolov
dd4eddada2 upd: 8.3p1 -> 8.8p1
- update from 8.3p1 to 8.8p1
- update patches from Fedora
- remove not used patches and bcond_with-conditions
- remove non-vendorixed names of GOST algos (author of the patch, glebfm@altlinux.org, considers this implementation not widely-tested, not standartized and not much recommended for usage, it exists just because it has to exist), now the patch from ALT Linux is used without modifications, still in TODO considering migration to LibreSSL (questions of libressl+openssl via pkcs11 in one runtime have to be studied thorougly)
- enable U2F
- drop odd directories /usr/libexec/ssh and /usr/lib64/ssh in favour of /usr/libexec
- get rid of rpm-helper, migrate to systemd-sysusers
- delete no more needed scriptlet (installing updates in rosa2016.1 will run it, and it is not needed for pure installation of rosa2019.05 and rosa2021.1)
- do not co-own /var/empty with filesystem
2021-09-27 00:22:59 +03:00
Andrey Grigorev
5818f6c703 Add Rec for gnome dialog 2021-08-23 09:07:00 +00:00
Andrey Grigorev
a54613b673 MassBuild#2340: Increase release tag 2021-08-11 12:17:12 +00:00
Alexander Stefanov
aa4073b13c 8.3p1 2020-05-30 23:15:59 +00:00
Mikhail Novosyolov
f2103f758e Merge branch 'rosa2019.1' into rosa2016.1 2020-02-20 11:11:25 +03:00
Mikhail Novosyolov
acc6d5b84f support GOST (from ALT Linux) 2020-02-20 11:07:57 +03:00
Mikhail Novosyolov
3faae1666e fix building with selinux 2020-02-20 10:49:23 +03:00
Mikhail Novosyolov
7fbc238f2d upd: 8.1p1 -> 8.2p1, upd patches from Fedora 2020-02-20 09:39:08 +03:00
Mikhail Novosyolov
8821206239 put ssh-askpass to libexecdir for compat with RH 2020-02-20 09:25:26 +03:00
Mikhail Novosyolov
d218e0156d More clean up 2020-02-20 09:18:14 +03:00
NixTux Commit Bot
89c79c35e0 bot: rpm5 -> rpm4 (8) 2020-01-13 16:36:16 +03:00
NixTux Commit Bot
31f0b9206d bot: rpm5 -> rpm4 (3) 2020-01-04 23:37:44 +03:00
NixTux Commit Bot
7f8dad67b4 bot: rpm5 -> rpm4 (1) 2020-01-04 05:10:45 +03:00
Алзим
41dc2d149e Updated to 8.1p1 2019-10-11 00:46:19 +03:00
Mikhail Novosyolov
b96d3cf118 Merge branch 'rosa2019.1' into rosa2016.1 2019-09-30 18:18:10 +03:00
Mikhail Novosyolov
8dafe20eae Fix CVE-2018-20685 2019-09-30 18:17:22 +03:00
Mikhail Novosyolov
3b6f385a11 Really apply patches, remove patch which refactors not existing code 2019-09-30 18:14:15 +03:00
Mikhail Novosyolov
6d29677168 Merge branch 'rosa2019.1' into rosa2016.1 2019-09-30 02:48:37 +03:00
Mikhail Novosyolov
c392516891 Add SELinux patches from Fedora 2019-09-30 02:43:46 +03:00
Mikhail Novosyolov
40fdc5f5d7 Add patch to work correctly with security-labelled TCP/IP packets 2019-09-30 02:36:10 +03:00
Alexander Stefanov
e43b1e0225 add selinux 2019-07-27 20:15:32 +00:00
Mikhail Novosyolov
9da2b298c3 Bump release after cherry-picking 4dd7e5f96a 2019-04-22 04:43:53 +03:00
Mikhail Novosyolov
cdab4d146b take last Port definition 2019-04-22 04:43:05 +03:00
Mikhail Novosyolov
4dd7e5f96a take last Port definition 2019-04-22 04:41:57 +03:00
Andrey Bondrov
aa12fa4be8 MassBuild#1671: Increase release tag 2019-04-14 01:44:38 +00:00
Mikhail Novosyolov
f7a578aaac Check if Avahi services directory exists and is writable 2019-04-12 20:11:53 +03:00
Mikhail Novosyolov
07d6ca5b5c Dynamically create Avahi service with correct sshd port after starting sshd, delete it after stopping sshd (RB#9855) 2019-04-12 18:22:40 +03:00
Mikhail Novosyolov
da7dda90e3 Rebuild with krb5-1.16.2 and openldap-2.4.46 2019-01-24 11:56:11 +03:00
Алзим
78983ea0d7 CVE-2019-6111, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110 2019-01-16 20:12:22 +03:00
Mikhail Novosyolov
7088064a0a Fixed Description in sshd*.service 2018-11-22 21:18:16 +03:00
Mikhail Novosyolov
5179a7023c Fixed minor typos 2018-11-19 18:19:42 +03:00
Mikhail Novosyolov
383c996c5d Restart sshd only if was failed (after fixing host keys permissions) 2018-11-19 02:09:42 +03:00
Mikhail Novosyolov
725d8454a2 Fix host keys permissions on existing installations 2018-11-19 01:58:47 +03:00
Mikhail Novosyolov
3f824adc9e Revert "enabled kerberos support". This reverts commit 3d90d35df6.
I actually disabled kerberos, not enabled it.
2018-11-16 16:19:04 +03:00
Mikhail Novosyolov
c62fbe57cf Fixed dependency 2018-11-16 12:58:58 +03:00