- djm@cvs.openbsd.org 2001/02/14 9:46:03

[openssh.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index c578af312a8c9ef3ea67caa4f1871c219ea2cae5..911589ebf35e015a048afa3272bc0be19232f3ac 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,42 @@
+20010215
+ - (djm) Move PAM session setup back to before setuid to user. Fixes 
+   problems on Solaris-derived PAMs.
+ - (djm) Clean up PAM namespace. Suggested by Darren Moffat
+   <Darren.Moffat@eng.sun.com>
+ - (bal) Sync w/ OpenSSH for new release
+   - markus@cvs.openbsd.org 2001/02/12 12:45:06
+     [sshconnect1.c]
+     fix xmalloc(0), ok dugsong@
+   - markus@cvs.openbsd.org 2001/02/11 12:59:25
+     [Makefile.in sshd.8 sshconnect2.c readconf.h readconf.c packet.c
+      sshd.c ssh.c ssh.1 servconf.h servconf.c myproposal.h kex.h kex.c]
+     1) clean up the MAC support for SSH-2
+     2) allow you to specify the MAC with 'ssh -m'
+     3) or the 'MACs' keyword in ssh(d)_config
+     4) add hmac-{md5,sha1}-96
+             ok stevesk@, provos@
+   - markus@cvs.openbsd.org 2001/02/12 16:16:23
+     [auth-passwd.c auth.c auth.h auth1.c auth2.c servconf.c servconf.h
+      ssh-keygen.c sshd.8]
+     PermitRootLogin={yes,without-password,forced-commands-only,no}
+     (before this change, root could login even if PermitRootLogin==no)
+  - deraadt@cvs.openbsd.org 2001/02/12 22:56:09
+     [clientloop.c packet.c ssh-keyscan.c]
+     deal with EAGAIN/EINTR selects which were skipped
+  - markus@cvs.openssh.org 2001/02/13 22:49:40
+    [auth1.c auth2.c]
+    setproctitle(user) only if getpwnam succeeds
+  - markus@cvs.openbsd.org 2001/02/12 23:26:20
+    [sshd.c]
+    missing memset; from solar@openwall.com
+  - stevesk@cvs.openbsd.org 2001/02/12 20:53:33
+    [sftp-int.c]
+    lumask now works with 1 numeric arg; ok markus@, djm@
+  - djm@cvs.openbsd.org 2001/02/14 9:46:03
+    [sftp-client.c sftp-int.c sftp.1]
+    Fix and document 'preserve modes & times' option ('-p' flag in sftp);
+    ok markus@
+
 20010214
  - (djm) Don't try to close PAM session or delete credentials if the
    session has not been open or credentials not set. Based on patch from 
@@ -8,6 +47,7 @@
    Mark Miller <markm@swoon.net>
  - (djm) Split out and improve OSF SIA auth code. Patch from Chris Adams
    <cmadams@hiwaay.net> with a little modification and KNF.
+ - (stevesk) fix for SIA patch, misplaced session_setup_sia()
 
 20010213
  - (djm) Only test -S potential EGD sockets if they exist and are readable.