d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add OpenSSH blurb and some other minor changes.

Browse Source
This commit is contained in:
Kris Kennaway 2000-02-28 01:57:15 +00:00
parent 5403e5e3f3
commit 494adc0168
2 changed files with 30 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
release/texts/alpha/RELNOTES.TXT
View File

@ -115,8 +115,8 @@ Support for probabalistic rule matching has been added to IPFW. [MERGED]
IPFW logging is now dynamic. IPFW logging counts can be reset, and any
given rule can be given an arbitrary logging limit. [MERGED]
The top-level category "security" has been added, and IPFW now uses
syslog(3) to log all messages to /var/log/security.
The top-level syslog(3) category "security" has been added, and IPFW now
uses syslog(3) to log all messages to /var/log/security.
Driver support has been added for PCI fast ethernet adapters based on
the Silicon Integrated Systems SiS 900 and SiS 7016 ethernet controllers.
@ -170,6 +170,10 @@ adapters. This includes PCMCIA, PCI and ISA models.
1.2. SECURITY FIXES
-------------------
Numerous security enhancements and fixes have been applied during the
course of development of FreeBSD 4.0. Most of these have also been
backported to the 3.x-STABLE series.
A new jail(2) system call and admin command (jail(8)) have been added for
additional flexibility in creating secure process execution environments.
@ -177,6 +181,15 @@ OpenSSL v0.9.4 (a general-purpose cryptography and SSL2/3/TLSv1 toolkit)
has been integrated with the base system. In the future this will be used
to provide strong cryptography for FreeBSD utilities out-of-the-box.
OpenSSH 1.2 has been integrated with the base system. OpenSSH is a free
(BSD-licensed), full-featured implementation of the SSH v1 protocol, which
is completely interoperable with other SSH v1 clients and servers, such as
the /usr/ports/security/ssh port. OpenSSH provides all of the features of
this port - in fact it is based on an older release before the software
became restrictively licensed. FreeBSD 4.0 provides SSH client/server
functionality out-of-the-box if you choose to install the 'DES'
cryptography distribution in sysinstall.
1.3. USERLAND CHANGES
---------------------

17
release/texts/i386/RELNOTES.TXT
View File

@ -122,8 +122,8 @@ of independent queues. [MERGED]
Several fixes to bridging, which now supports clusters of interfaces
with bridging being done independently within each cluster. [MERGED]
The top-level category "security" has been added, and IPFW now uses
syslog(3) to log all messages to /var/log/security.
The top-level syslog(3) category "security" has been added, and IPFW now
uses syslog(3) to log all messages to /var/log/security.
Driver support has been added for PCI fast ethernet adapters based on
the Silicon Integrated Systems SiS 900 and SiS 7016 ethernet controllers.
@ -178,6 +178,10 @@ adapters. This includes PCMCIA, PCI and ISA models.
1.2. SECURITY FIXES
-------------------
Numerous security enhancements and fixes have been applied during the
course of development of FreeBSD 4.0. Most of these have also been
backported to the 3.x-STABLE series.
A new jail(2) system call and admin command (jail(8)) have been added for
additional flexibility in creating secure process execution environments.
@ -185,6 +189,15 @@ OpenSSL v0.9.4 (a general-purpose cryptography and SSL2/3/TLSv1 toolkit)
has been integrated with the base system. In the future this will be used
to provide strong cryptography for FreeBSD utilities out-of-the-box.
OpenSSH 1.2 has been integrated with the base system. OpenSSH is a free
(BSD-licensed), full-featured implementation of the SSH v1 protocol, which
is completely interoperable with other SSH v1 clients and servers, such as
the /usr/ports/security/ssh port. OpenSSH provides all of the features of
this port - in fact it is based on an older release before the software
became restrictively licensed. FreeBSD 4.0 provides SSH client/server
functionality out-of-the-box if you choose to install the 'DES'
cryptography distribution in sysinstall.
Telnet has a new encrypted authentication mechanism called SRA. SRA
uses a Diffie-Hellmen exchange to establish a session key, then uses
that to DES encrypt the username and password. As a side effect the