freebsd kernel with SKQ
Go to file
Ed Maste 952d18a214 ssh: Remove AES-CBC ciphers from default server and client lists
A base system OpenSSH update in 2016 or so removed a number of ciphers
from the default lists offered by the server/client, due to known
weaknesses.  This caused POLA issues for some users and prompted
PR207679; the ciphers were restored to the default lists in r296634.

When upstream removed these ciphers from the default server list, they
moved them to the client-only default list.  They were subsequently
removed from the client default, in OpenSSH 7.9p1.

The change has persisted long enough.  Remove these extra ciphers from
both the server and client default lists, in advance of FreeBSD 13.

Reviewed by:	markm, rgrimes
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D25833
2020-07-28 00:24:12 +00:00
bin sh(1): print a newline when ^D quits sh 2020-07-27 18:46:20 +00:00
cddl MFOpenZFS: Fix zpool history unbounded memory usage 2020-07-23 14:21:45 +00:00
contrib Document the IPFILTER_PREDEFINED environment variable. 2020-07-23 17:39:49 +00:00
crypto ssh: Remove AES-CBC ciphers from default server and client lists 2020-07-28 00:24:12 +00:00
etc Add tests for "add", "change" and "delete" functionality of /sbin/route. 2020-07-22 13:49:54 +00:00
gnu Remove now-unused GNU as build infrastructure 2020-06-07 13:53:23 +00:00
include Import sendmail 8.16.1 2020-07-14 21:40:53 +00:00
kerberos5 Update Makefile.depend files 2019-12-11 17:37:53 +00:00
lib libmd: temporarily disable optimized assembly skein1024 implementation 2020-07-23 18:55:47 +00:00
libexec Load ipfilter, ipnat, and ippool rules, and start ipmon in a vnet jail. 2020-07-23 17:39:45 +00:00
release Enable EFI system partition on amd64 and i386 VM images 2020-07-14 18:02:24 +00:00
rescue rescue: Remove useless linking with libl 2020-03-24 07:08:02 +00:00
sbin Make it possible to get/set MMC frequency from camcontrol 2020-07-24 21:14:59 +00:00
secure Replace OPENSSL_NO_SSL3_METHODs with dummies 2020-07-01 00:59:28 +00:00
share tree.3: Bump date after 363450 (WAVL) 2020-07-27 11:42:22 +00:00
stand loader: Avoid -Wpointer-to-int cast warnings for Arm and RISC-V 2020-07-26 18:17:36 +00:00
sys Add initial driver for ACPI Platform Error Interfaces. 2020-07-27 21:19:41 +00:00
targets Add WITH_CLANG_FORMAT option 2020-06-24 17:03:42 +00:00
tests Limit gmirror failpoint tests to the test worker 2020-07-23 23:29:50 +00:00
tools add script to help figure out what man pages need MLINKS updated... 2020-07-16 23:05:18 +00:00
usr.bin comm(1): Add EXAMPLES section 2020-07-27 16:51:23 +00:00
usr.sbin nologin.8: Improve wording 2020-07-27 10:45:47 +00:00
.arcconfig
.arclint arc lint: ignore /tests/ in chmod 2017-12-19 03:38:06 +00:00
.cirrus.yml Cirrus-CI: increase timeout to 120m 2020-02-19 15:56:40 +00:00
.clang-format Clang-format: Avoid hardcoded LLVM include-order style 2020-06-24 23:22:36 +00:00
.gitattributes Add a basic clang-format configuration file 2019-06-07 15:23:52 +00:00
.gitignore .gitignore: Add LINT kernel configurations generated into SRCDIR 2019-08-10 18:22:22 +00:00
COPYRIGHT Happy New Year 2020! 2019-12-31 16:01:36 +00:00
LOCKS LOCKS: update current locks 2018-06-09 03:08:04 +00:00
MAINTAINERS Update bhyve maintainers. 2020-06-26 06:11:50 +00:00
Makefile Use universe-toolchain config(8) 2020-04-29 02:18:39 +00:00
Makefile.inc1 Add WITH_CLANG_FORMAT option 2020-06-24 17:03:42 +00:00
Makefile.libcompat Stop building libl and liby 2020-03-26 08:23:09 +00:00
Makefile.sys.inc AUTO_OBJ: For all top-level targets enforce using an OBJDIR. 2017-12-05 21:29:47 +00:00
ObsoleteFiles.inc devstat(9): Update the man page to reflect the current implementation 2020-07-17 22:15:02 +00:00
README Import sendmail 8.16.1 2020-07-14 21:40:53 +00:00
README.md README: add generic notes about GENERIC and NOTES 2018-06-17 19:44:24 +00:00
RELNOTES Add a RELNOTES entry for r363253. 2020-07-16 15:12:52 +00:00
UPDATING Add a note regarding the introduction of the new bc and dc implementations 2020-07-05 14:43:14 +00:00

FreeBSD Source:

This is the top level of the FreeBSD source directory. This file was last revised on: FreeBSD

FreeBSD is an operating system used to power modern servers, desktops, and embedded platforms. A large community has continually developed it for more than thirty years. Its advanced networking, security, and storage features have made FreeBSD the platform of choice for many of the busiest web sites and most pervasive embedded networking and storage devices.

For copyright information, please see the file COPYRIGHT in this directory. Additional copyright information also exists for some sources in this tree - please see the specific source directories for more information.

The Makefile in this directory supports a number of targets for building components (or all) of the FreeBSD source tree. See build(7), config(8), https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html, and https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html for more information, including setting make(1) variables.

Source Roadmap:

bin		System/user commands.

cddl		Various commands and libraries under the Common Development
		and Distribution License.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc.

gnu		Various commands and libraries under the GNU Public License.
		Please see gnu/COPYING* for more information.

include		System include files.

kerberos5	Kerberos5 (Heimdal) package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

rescue		Build system for statically linked /rescue utilities.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

stand		Boot loader sources.

sys		Kernel sources.

sys/<arch>/conf Kernel configuration files. GENERIC is the configuration
		used in release builds. NOTES contains documentation of
		all possible entries.

tests		Regression tests which can be run by Kyua.  See tests/README
		for additional information.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.

For information on synchronizing your source tree with one or more of the FreeBSD Project's development branches, please see:

https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/current-stable.html