similar to: [Bug 1644] Allow ip options except source routing

https://bugzilla.mindrot.org/show_bug.cgi?id=1585 Jakub Jelen <jjelen at redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jjelen at redhat.com --- Comment #20 from Jakub Jelen <jjelen at redhat.com> --- Created attachment 2647

https://bugzilla.mindrot.org/show_bug.cgi?id=1768 Jakub Jelen <jjelen at redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jjelen at redhat.com --- Comment #2 from Jakub Jelen <jjelen at redhat.com> --- Created attachment 2523

https://bugzilla.mindrot.org/show_bug.cgi?id=1844 Jakub Jelen <jjelen at redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jjelen at redhat.com --- Comment #3 from Jakub Jelen <jjelen at redhat.com> --- Created attachment 2547

https://bugzilla.mindrot.org/show_bug.cgi?id=1878 Jakub Jelen <jjelen at redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |REOPENED CC| |jjelen at redhat.com Resolution|FIXED

https://bugzilla.mindrot.org/show_bug.cgi?id=1278 Jakub Jelen <jjelen at redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|WONTFIX |--- Status|CLOSED |REOPENED CC| |jjelen

https://bugzilla.mindrot.org/show_bug.cgi?id=1773 Jakub Jelen <jjelen at redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jjelen at redhat.com --- Comment #5 from Jakub Jelen <jjelen at redhat.com> --- This is related to the bug

https://bugzilla.mindrot.org/show_bug.cgi?id=1940 Jakub Jelen <jjelen at redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jjelen at redhat.com --- Comment #18 from Jakub Jelen <jjelen at redhat.com> --- (In reply to Damien Miller

https://bugzilla.mindrot.org/show_bug.cgi?id=1402 Jakub Jelen <jjelen at redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2085|0 |1 is obsolete| | Attachment #2086|0 |1 is

Thanks Jakub. How does this patch match the OpenSSH source version? Does the patch only applicable to OpenSSH version 6.6.1, or does other version available as well? Thanks. On Fri, Dec 4, 2015 at 4:26 AM, Jakub Jelen <jjelen at redhat.com> wrote: > > On 12/04/2015 03:26 AM, security veteran wrote: > >> 3. Is there a way to re-compile OpenSSH by turning on/off some flags

https://bugzilla.mindrot.org/show_bug.cgi?id=1768 Jakub Jelen <jjelen at redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2523|0 |1 is obsolete| | --- Comment #4 from Jakub Jelen <jjelen at redhat.com> ---

https://bugzilla.mindrot.org/show_bug.cgi?id=1844 Jakub Jelen <jjelen at redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2547|0 |1 is obsolete| | --- Comment #4 from Jakub Jelen <jjelen at redhat.com> ---

Hello, I'm registering a strange new behavior after updating openssh on my CentOS 7.3 server. Firt of all difference of systemd service configuration between new openssh-server-6.6.1p1-35.el7_3.x86_64 and old openssh-server-6.6.1p1-33.el7_3.x86_6 [root at c7service ~]# diff new_sshd.service old_sshd.service 8c8,9 < Type=notify --- > Type=forking > PIDFile=/var/run/sshd.pid 10c11

Hi Jakub, Sorry for the late reply. I was off from work for a few days. I?ve tried to add the noexec, nosuid and nodev mount options but it seems to have some difficulties to do so with kubernetes nfs-mount. I?ll keep trying to resolve it anyway. The patch you pasted is exactly the thing I wanna have. I think it?s super useful and I definitely vote yes for merging it to master. I was actually

On Tue, 2020-06-23 at 08:06 +0200, Markus Friedl wrote: > I had something in mind like this for years, but with slightly > different steps: > My naive approach would be to keep the scp user interface and switch > to the sftp protocol internally. We could add a -M [scp|sftp] option > to scp and select the internal protocol. Later we switch the default > from scp to sftp. > No

https://bugzilla.mindrot.org/show_bug.cgi?id=2394 Bug ID: 2394 Summary: Provide a global configuration option to disable ControlPersist Product: Portable OpenSSH Version: 6.8p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: ssh

https://bugzilla.mindrot.org/show_bug.cgi?id=2338 Bug ID: 2338 Summary: scp -3 doesn't give an error on missing source directory Product: Portable OpenSSH Version: 6.7p1 Hardware: Other OS: Linux Status: NEW Severity: normal Priority: P5 Component: scp

On 12/30/2016 02:40 AM, Damien Miller wrote: > On Wed, 28 Dec 2016, Iain Morgan wrote: > >> Hello, >> >> On RHEL 6/amd64, the stock value for DEFAULT_PKCS11_WHITELIST is not >> very useful. On such systems, /usr/lib64/* would need to be added to the >> pattern list. Although users can specify the -P option every time they >> launch ssh-agent, it might be

https://bugzilla.mindrot.org/show_bug.cgi?id=1644 Summary: Allow ip options except source routing Product: Portable OpenSSH Version: 5.2p1 Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: unassigned-bugs at mindrot.org ReportedBy:

Hello all, as PKCS#11 URI became standard (RFC 7512), it would be good to be able to specify the keys using this notation in openssh. So far I implemented the minimal subset of this standard allowing to specify the URI for the ssh tool, in ssh_config and to work with ssh-agent. It does not bring any new dependency, provides unit and regress tests (while fixing agent-pkcs11 regress test). The

https://bugzilla.mindrot.org/show_bug.cgi?id=1585 --- Comment #23 from Jakub Jelen <jjelen at redhat.com> --- (In reply to Damien Miller from comment #22) > There were a few problems with the previous patches, most due to > host/match state persisting between files in non-intuitive ways. This was partially intention. There is nothing worse than including file into some unknown