Re: CVS commit: pkgsrc/security/openssh

[Jonathan Perkin <jperkin%joyent.com@localhost>]

* On 2015-08-14 at 09:57 BST, Jonathan Perkin wrote:

> Module Name:  pkgsrc
> Committed By: jperkin
> Date:         Fri Aug 14 08:57:00 UTC 2015
> 
> Modified Files:
>       pkgsrc/security/openssh: Makefile PLIST distinfo
>       pkgsrc/security/openssh/patches: patch-auth2.c patch-loginrec.c
>           patch-openbsd-compat_bsd-openpty.c patch-sftp-common.c patch-sshd.c
>           patch-uidswap.c
> Added Files:
>       pkgsrc/security/openssh/files: org.openssh.sshd.sb.in
>       pkgsrc/security/openssh/patches: patch-sandbox-darwin.c
> 
> Log Message:
> Fix a bug introduced 9 years ago in patch-sshd.c which has meant that
> privilege separation has been disabled all that time.  The logic was changed
> such that it was only enabled on Interix, instead of only being disabled on
> Interix as originally intended.

Credit for finding this bug goes to Jan Vlach on the smartos-discuss
mailing list.

-- 
Jonathan Perkin  -  Joyent, Inc.  -  www.joyent.com