HEADS UP on master

Matthew Dillon dillon at backplane.com
Mon Jun 17 10:21:03 PDT 2019


We're going to fix 'make upgrade' to not require this manual intervention,
but it may take a day or two, so anyone using master... beware of this
issue.

-Matt

On Mon, Jun 17, 2019 at 7:21 AM Rimvydas Jasinskas <rimvydasjas at gmail.com>
wrote:

> Hi,
>
> deprecated OPIE removal from base requires manual intervention
> *before* rebooting on updated master,
> The "make upgrade" script only warns about detected opie presence and
> suggest to manually edit or reinstall default PAM configs (cd
> /usr/src/etc/pam.d && make install) on both 5.6-RELEASE and
> 5.7-DEVELOPMENT.
> Make sure that /etc/pam.d/* configs no longer have hardcoded  pam_opie
> entries on master. For more information, see
> ed5666c1699a23a9ae3c0aca97dabaae71e26431
>
> Also OpenSSH was recently updated to 8.0p1. UsePAM option is enabled
> by default if sshd(8) is compiled with -DUSE_PAM.
> From now on default base sshd(8) configs are installed into
> /usr/share/examples/ssh/ together with cert.pem and openssl.cnf in
> /usr/share/examples/ssl/ too.
> Please check your /etc/ssh/sshd_config for deprecated options.
>
> RJ
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dragonflybsd.org/pipermail/users/attachments/20190617/e0139bce/attachment-0003.htm>


More information about the Users mailing list