From: Jeff W. <wi...@pu...> - 2014-04-23 11:17:25
|
<html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> <tt>This is an announcement </tt>that appeared in the openssh-unix-dev list<br> yesterday:<br> <br> -------- Original Message -------- <table class="moz-email-headers-table" border="0" cellpadding="0" cellspacing="0"> <tbody> <tr> <th align="RIGHT" nowrap="nowrap" valign="BASELINE">Subject: </th> <td>heads up: tcpwrappers support going away</td> </tr> <tr> <th align="RIGHT" nowrap="nowrap" valign="BASELINE">Date: </th> <td>Tue, 22 Apr 2014 17:33:59 +1000 (EST)</td> </tr> <tr> <th align="RIGHT" nowrap="nowrap" valign="BASELINE">From: </th> <td>Damien Miller <a class="moz-txt-link-rfc2396E" href="mailto:dj...@mi..."><dj...@mi...></a></td> </tr> <tr> <th align="RIGHT" nowrap="nowrap" valign="BASELINE">To: </th> <td><a class="moz-txt-link-abbreviated" href="mailto:ope...@mi...">ope...@mi...</a></td> </tr> </tbody> </table> <br> <br> <pre>Hi, This is an early warning: OpenSSH will drop tcpwrappers in the next release. sshd_config has supported the Match keyword for a long time and it is possible to express more useful conditions (e.g. matching by user and address) than tcpwrappers allowed. Removing it reduces the amount of code in the 'hot' pre-authentication path in sshd and rids us of a dependency. -d _______________________________________________ openssh-unix-dev mailing list <a class="moz-txt-link-abbreviated" href="mailto:ope...@mi...">ope...@mi...</a> <a class="moz-txt-link-freetext" href="https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev">https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev</a> </pre> <br> <pre class="moz-signature" cols="72">-- Jeff Wieland | Purdue University Network Systems Administrator | ITIS UNIX Platforms Voice: (765)496-8234 | 155 S. Grant Street FAX: (765)494-2253 | West Lafayette, IN 47907</pre> </body> </html> |