Age | Commit message (Collapse) | Author | Files | Lines |
|
http://patch-tracker.debian.org/patch/series/view/rssh/2.3.4-1/fixes/rsync-protocol.diff
|
|
2.3.4
- Fixed several problems with argument validation
- Added -Wall and cleaned up compiler output
- Installing rssh.conf as rssh.conf.default
|
|
|
|
This release solves two small bugs, with minor security implications.
|
|
|
|
Changes since last packaged version (2.3.0):
2.3.2
- fixed segfault due to checking the length of variables that I forgot to
remove from build_arg_vector() since the chroot root exploit fix in 2.3.0
2.3.1
- fixed stupid bug that caused rssh not to allow rsync and rdist
|
|
Note that this is (mostly) a security fix release.
Changes since last packaged version (2.2.3):
2.3.0
- modified chroot_helper to parse the config file, to avoid arbitrary
chroot() (and thus root compromise)
- numerous documentation updates
- fix for va_start()/va_end()-related segfault on 64-bit architecture
- small bit of code cleanup
|
|
Based on rssh package in pkgsrc-wip by pancake at phreaker dot net,
slightly modified and updated to latest version by myself.
Claim stewardship.
Rssh is a restricted shell for use with OpenSSH, allowing only scp
and/or sftp. For example, if you have a server which you only want
to allow users to copy files off of via scp, without providing
shell access, you can use rssh to do that.
|