From owner-freebsd-stable@FreeBSD.ORG Tue Mar 4 08:32:13 2014 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C41BF1F9; Tue, 4 Mar 2014 08:32:13 +0000 (UTC) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id 852EC1FC; Tue, 4 Mar 2014 08:32:13 +0000 (UTC) Received: from nine.des.no (smtp.des.no [194.63.250.102]) by smtp-int.des.no (Postfix) with ESMTP id 8A0775A7F; Tue, 4 Mar 2014 08:32:06 +0000 (UTC) Received: by nine.des.no (Postfix, from userid 1001) id CC5AC817; Tue, 4 Mar 2014 09:32:10 +0100 (CET) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: Andrey Chernov Subject: Re: openssh in stable-10 broken config or sandbox References: <531184A8.4050909@freebsd.org> <53118E9C.5030804@freebsd.org> Date: Tue, 04 Mar 2014 09:32:10 +0100 In-Reply-To: <53118E9C.5030804@freebsd.org> (Andrey Chernov's message of "Sat, 01 Mar 2014 11:39:08 +0400") Message-ID: <86zjl6tldh.fsf@nine.des.no> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Mar 2014 08:32:13 -0000 Andrey Chernov writes: > Just find that capsicum is required now for default (i.e. sandbox) mode. > Don't think it is wise move, people may lost remote connections that > way, at least UPDATING entry is needed, but check for WITHOUT_CAPSICUM > for defaults will be better. Right, I have a patch for that somewhere. I'll try to get it in later today. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no