HEADS UP on master

Rimvydas Jasinskas rimvydasjas at gmail.com
Mon Jun 17 07:27:40 PDT 2019


Hi,

deprecated OPIE removal from base requires manual intervention
*before* rebooting on updated master,
The "make upgrade" script only warns about detected opie presence and
suggest to manually edit or reinstall default PAM configs (cd
/usr/src/etc/pam.d && make install) on both 5.6-RELEASE and
5.7-DEVELOPMENT.
Make sure that /etc/pam.d/* configs no longer have hardcoded  pam_opie
entries on master. For more information, see
ed5666c1699a23a9ae3c0aca97dabaae71e26431

Also OpenSSH was recently updated to 8.0p1. UsePAM option is enabled
by default if sshd(8) is compiled with -DUSE_PAM.
>From now on default base sshd(8) configs are installed into
/usr/share/examples/ssh/ together with cert.pem and openssl.cnf in
/usr/share/examples/ssl/ too.
Please check your /etc/ssh/sshd_config for deprecated options.

RJ


More information about the Users mailing list