[ol7_latest_archive] openssh-keycat-6.6.1p1-11.el7.x86_64

Name:	openssh-keycat
Version:	6.6.1p1
Release:	11.el7
Architecture:	x86_64
Group:	System Environment/Daemons
Size:	50341
License:	BSD
RPM:	openssh-keycat-6.6.1p1-11.el7.x86_64.rpm
Source RPM:	openssh-6.6.1p1-11.el7.src.rpm
Build Date:	Fri Mar 06 2015
Build Host:	ca-buildj3.us.oracle.com
Vendor:	Oracle America
URL:	http://www.openssh.com/portable.html
Summary:	A mls keycat backend for openssh
Description:	OpenSSH mls keycat is backend for using the authorized keys in the openssh in the mls mode.

Changelog (Show File list) (Show related packages)

Fri Jan 16 2015 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-11 + 0.9.3-9
```
- fix direction in CRYPTO_SESSION audit message (#1171248)
```

Wed Jan 14 2015 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-10 + 0.9.3-9

- add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278
  (#1169843)

Fri Dec 19 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-9 + 0.9.3-9
```
- log via monitor in chroots without /dev/log (#1083482)
```

Mon Dec 15 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-8 + 0.9.3-9

- increase size of AUDIT_LOG_SIZE to 256 (#1171163)
- record pfs= field in CRYPTO_SESSION audit event (#1171248)

Thu Nov 13 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-7 + 0.9.3-9

- fix gsskex patch to correctly handle MONITOR_REQ_GSSSIGN request (#1118005)

Fri Nov 07 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-6 + 0.9.3-9

- correct the calculation of bytes for authctxt->krb5_ccname <ams@corefiling.com> (#1161073)

Tue Nov 04 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-5 + 0.9.3-9
```
- change audit trail for unknown users (#1158521)
```

Sun Oct 26 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-4 + 0.9.3-9

- revert the default of KerberosUseKuserok back to yes
- fix kuserok patch which checked for the existence of .k5login unconditionally
  and hence prevented other mechanisms to be used properly

Mon Sep 29 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-3 + 0.9.3-9

- fix parsing empty options in sshd_conf
- ignore SIGXFSZ in postauth monitor

Tue Sep 23 2014 Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-2 + 0.9.3-9

- slightly change systemd units logic - use sshd-keygen.service (#1066615)
- log when a client requests an interactive session and only sftp is allowed (#1130198)
- sshd-keygen - don't generate DSA and ED25519 host keys in FIPS mode (#1143867)