hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2024-11-23 09:41:13 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity
96c2538121
HardenedBSD/crypto
History
Gleb Smirnoff 9ff45b8ed8 sshd: do not resolve refused client hostname 
This is a compromise between POLA and practical reasoning.  We don't
want to block the main server loop in an attempt to resolve.  But we
need to keep the format of the logged message as is, for sake of
sshguard and other scripts.  So let's print just the IP address twice,
this is what libwrap's refuse() would do if it failed to resolve.

Reviewed by:		philip
PR:			269456
Differential revision:	https://reviews.freebsd.org/D40069
2023-07-20 14:56:20 -07:00
..
heimdal
openssh sshd: do not resolve refused client hostname 2023-07-20 14:56:20 -07:00
openssl libcrypto: add missing symbols to the fips provider 2023-07-05 16:00:54 -04:00
README

README 

$FreeBSD$

This directory is for the EXACT same use as src/contrib, except it
holds crypto sources.  In other words, this holds raw sources obtained
from various third party vendors, with FreeBSD patches applied.  No
compilation is done from this directory, it is all done from the
src/secure directory.  The separation between src/contrib and src/crypto
is the result of an old USA law, which made these sources export
controlled, so they had to be kept separate.