Added
chroot(2)
support for sshd(8),
controlled by a new option
! "ChrootDirectory". Please refer to
sshd_config(5)
for details, and
please use this feature carefully.
--- 287,297 ----
- New features:
! - Added
chroot(2)
support for sshd(8),
controlled by a new option
! "ChrootDirectory". Please refer to
sshd_config(5)
for details, and
please use this feature carefully.
***************
*** 302,308 ****
used when the command "internal-sftp" is specified in a Subsystem
or ForceCommand declaration. When used with ChrootDirectory, the
internal sftp server requires no special configuration of files
! inside the chroot environment. Please refer to
sshd_config(5)
for more information.
- Added a protocol extension method "posix-rename@openssh.com" for
--- 302,308 ----
used when the command "internal-sftp" is specified in a Subsystem
or ForceCommand declaration. When used with ChrootDirectory, the
internal sftp server requires no special configuration of files
! inside the chroot environment. Please refer to
sshd_config(5)
for more information.
- Added a protocol extension method "posix-rename@openssh.com" for
***************
*** 317,328 ****
keys when in inetd mode and protocol 2 connections are negotiated.
This speeds up protocol 2 connections to inetd-mode servers that
also allow Protocol 1.
!
- Accept the PermitRootLogin directive in a
sshd_config(5)
Match
block. Allows for, e.g. permitting root only from the local
network.
!
- Reworked
sftp(1)
argument splitting and escaping to be more
internally consistent (i.e. between sftp commands) and more
--- 317,328 ----
keys when in inetd mode and protocol 2 connections are negotiated.
This speeds up protocol 2 connections to inetd-mode servers that
also allow Protocol 1.
!
- Accept the PermitRootLogin directive in a
sshd_config(5)
Match
block. Allows for, e.g. permitting root only from the local
network.
!
- Reworked
sftp(1)
argument splitting and escaping to be more
internally consistent (i.e. between sftp commands) and more
***************
*** 331,337 ****
Please note that this will change the
interpretation of some quoted strings, especially those with
embedded backslash escape sequences.
!
- Support "Banner=none" in
sshd_config(5)
to disable sending of a
pre-login banner (e.g. in a Match block).
--- 331,337 ----
Please note that this will change the
interpretation of some quoted strings, especially those with
embedded backslash escape sequences.
!
- Support "Banner=none" in
sshd_config(5)
to disable sending of a
pre-login banner (e.g. in a Match block).
***************
*** 358,364 ****
- ssh(1)
used the obsolete SIG DNS RRtype for host keys in DNS,
instead of the current standard RRSIG.
!
- Correctly drain ACKs when a
sftp(1)
upload write fails midway,
avoids a fatal() exit from what should be a recoverable condition.
--- 358,364 ----
- ssh(1)
used the obsolete SIG DNS RRtype for host keys in DNS,
instead of the current standard RRSIG.
!
- Correctly drain ACKs when a
sftp(1)
upload write fails midway,
avoids a fatal() exit from what should be a recoverable condition.
***************
*** 367,373 ****
packet size, causing fatal errors under some conditions.
- Many more bugfixes. Please refer to the
Release Notes.
!
--- 367,373 ----
packet size, causing fatal errors under some conditions.