rawhide report: 20040608 changes

[Stephen Smoogen]

On Tue, 2004-06-08 at 08:39, Dennis Gilmore wrote:
> Once upon a time Wednesday 09 June 2004 12:35 am, Chris Kloiber wrote:
> > On Tue, 2004-06-08 at 08:59 -0400, Nalin Dahyabhai wrote:
> > > On Tue, Jun 08, 2004 at 02:45:23PM +0200, Aurelien Bompard wrote:
> > > > > openssh-3.8.1p1-1
> > > > > -----------------
> > > > > * Mon Jun 07 2004 Nalin Dahyabhai <nalin at redhat.com> 3.8.1p1-1
> > > > >
> > > > > - request gssapi-with-mic by default but not delegation (flag day for
> > > > > anyone who used previous gssapi patches)
> > > > > - no longer request x11 forwarding by default
> > > >
> > > > Why no X11 forwarding by default ?
> > >
> > > It's not the default upstream, for good reasons, and people have always
> > > been able to override the default either in ~/.ssh/config or by passing
> > > the -X (and now, also -Y) flag on the ssh command line.
> > >
> > > HTH,
> > >
> > > Nalin
> >
> > Ouch. Please make sure if you errata that change for RHEL that a
> > *BIG*FAT*WARNING* appears somewhere in the errata announcement. I can
> > hear the howls of protest already.
> >
> > --
> > Chris Kloiber
> 
> Considering Red Hats policy of recomending for RHEL  that you use the gui 
> tools for configuration i dont think it should be turned off perhaps made 
> safer somehow but im guessing alot of enterprise admins wont be happy.

Hopefully by the time it gets rolled into RHEL 3U3 or RHEL4 it will have
the Xsecurity items that Alan mentioned working in a clean fashion.

-- 
Stephen John Smoogen		smoogen at lanl.gov
Los Alamos National Lab  CCN-5 Sched 5/40  PH: 4-0645
Ta-03 SM-1498 MailStop B255 DP 10S  Los Alamos, NM 87545
-- Please, I have had too much of the stupid today. Please wait until
-- tomorrow to say these things so my tolerance has refreshed.