| Name: | pam_ssh_agent_auth |
|---|---|
| Version: | 0.9.3 |
| Release: | 9.12.el7_1 |
| Architecture: | i686 |
| Group: | System Environment/Base |
| Size: | 337353 |
| License: | BSD |
| RPM: | pam_ssh_agent_auth-0.9.3-9.12.el7_1.i686.rpm |
| Source RPM: | openssh-6.6.1p1-12.el7_1.src.rpm |
| Build Date: | Tue May 12 2015 |
| Build Host: | x86-ol7-builder-03.us.oracle.com |
| Vendor: | Oracle America |
| URL: | http://www.openssh.com/portable.html |
| Summary: | PAM module for authentication with ssh-agent |
| Description: | This package contains a PAM module which can be used to authenticate users using ssh keys stored in a ssh-agent. Through the use of the forwarding of ssh-agent connection it also allows to authenticate with remote ssh-agent instance. The module is most useful for su and sudo service stacks. |
- Fix labeling in MLS according to selected sensitivity (#1202843)
- fix direction in CRYPTO_SESSION audit message (#1171248)
- add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278 (#1169843)
- log via monitor in chroots without /dev/log (#1083482)
- increase size of AUDIT_LOG_SIZE to 256 (#1171163) - record pfs= field in CRYPTO_SESSION audit event (#1171248)
- fix gsskex patch to correctly handle MONITOR_REQ_GSSSIGN request (#1118005)
- correct the calculation of bytes for authctxt->krb5_ccname <ams@corefiling.com> (#1161073)
- change audit trail for unknown users (#1158521)
- revert the default of KerberosUseKuserok back to yes - fix kuserok patch which checked for the existence of .k5login unconditionally and hence prevented other mechanisms to be used properly
- fix parsing empty options in sshd_conf - ignore SIGXFSZ in postauth monitor