svn commit: r294464 - in head: crypto/openssh crypto/openssh/contrib/redhat crypto/openssh/contrib/suse crypto/openssh/openbsd-compat crypto/openssh/regress crypto/openssh/regress/unittests crypto/...

[Dag-Erling Smørgrav]

Bryan Drewery <bdrewery at FreeBSD.org> writes:
> Dag-Erling Smørgrav <des at FreeBSD.org> wrote:
> > -#PermitRootLogin no
> > +#PermitRootLogin prohibit-password
> Shouldn't the comments note the default? The default here is still
> 'no'.

Yes, I kept our local modification but somehow either didn't notice the
comment or resolved the conflict incorrectly.

> Upstream 7.1p2 does use PERMIT_NO_PASSWD rather than PERMIT_NO that we
> have.  I think we should make this change:

We've always had this turned off, while upstream had it on by default.
The new default doesn't work correctly with PAM, and the fix is not
trivial.

DES
-- 
Dag-Erling Smørgrav - des at des.no