Document the fact that OpenSSH default configuration requires Capsicum

capability mode support in kernel, which have been worked around later
but it's still recommended to have it enabled.
This commit is contained in:
Xin LI 2014-03-03 23:26:48 +00:00
parent 115cb73509
commit 5e4b8b0d91

View File

@ -52,6 +52,16 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 11.x IS SLOW:
has now been fixed, but any C++ applications or shared libraries built
between r261283 and r261801 should be recompiled.
20140204:
OpenSSH will now ignore errors caused by kernel lacking of Capsicum
capability mode support. Please note that enabling the feature in
kernel is still highly recommended.
20140131:
OpenSSH is now built with sandbox support, and will use sandbox as
the default privilege separation method. This requires Capsicum
capability mode support in kernel.
20140128:
The libelf and libdwarf libraries have been updated to newer
versions from upstream. Shared library version numbers for