[ol7_latest_archive] openssh-keycat-6.6.1p1-12.el7_1.x86_64

OpenSSH mls keycat is backend for using the authorized keys in the
openssh in the mls mode.

Changelog (Show File list) (Show related packages)

• Thu Mar 19 2015 Jakub Jelen <jjelen@redhat.com> 6.6.1p1-12 + 0.9.3-9

  - Fix labeling in MLS according to selected sensitivity (#1202843)

• Fri Jan 16 2015 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-11 + 0.9.3-9

  - fix direction in CRYPTO_SESSION audit message (#1171248)

• Wed Jan 14 2015 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-10 + 0.9.3-9

  - add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278
    (#1169843)

• Fri Dec 19 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-9 + 0.9.3-9

  - log via monitor in chroots without /dev/log (#1083482)

• Mon Dec 15 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-8 + 0.9.3-9

  - increase size of AUDIT_LOG_SIZE to 256 (#1171163)
  - record pfs= field in CRYPTO_SESSION audit event (#1171248)

• Thu Nov 13 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-7 + 0.9.3-9

  - fix gsskex patch to correctly handle MONITOR_REQ_GSSSIGN request (#1118005)

• Fri Nov 07 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-6 + 0.9.3-9

  - correct the calculation of bytes for authctxt->krb5_ccname <ams@corefiling.com> (#1161073)

• Tue Nov 04 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-5 + 0.9.3-9

  - change audit trail for unknown users (#1158521)

• Sun Oct 26 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-4 + 0.9.3-9

  - revert the default of KerberosUseKuserok back to yes
  - fix kuserok patch which checked for the existence of .k5login unconditionally
    and hence prevented other mechanisms to be used properly

• Mon Sep 29 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-3 + 0.9.3-9

  - fix parsing empty options in sshd_conf
  - ignore SIGXFSZ in postauth monitor