OpenBSD OpenSSH front), add ConnectionsPerPeriod to prevent DoS via
running the system out of resources. In reality, this wouldn't
be a full DoS, but would make a system slower, but this is a better
thing to do than let the system get loaded down.
So here we are, rate-limiting. The default settings are now:
Five connections are allowed to authenticate (and not be rejected) in
a period of ten seconds.
One minute is given for login grace time.
More work in this area is being done by alfred@FreeBSD.org and
markus@OpenBSD.org, at the very least. This is, essentially, a
stopgap solution; however, it is a properly implemented and documented
one, and has an easily modifiable framework.
reality, though. One file, cipher.c, calls cryptographic routines
from external libraries. This really cannot encumber OpenSSH in
any case, but I put RESTRICTED back since it would give people a
false hope of being able to install the OpenSSH package but
not the requisite, RESTRICTED (so nonexistant) openssl package.
Reasons:
1. It's not crypto.
2. It links with crypto.
a. That crypto is in the public domain.
b. Linking with crypto does not constitute cryptography.
3. Even if it were crypto, the description of the entire protocol, etc.,
is in the public domain. The RFC is PD in the USA, and the white paper
in Europe.
4. Precedence? Even if it were crypto, the Bernstein case has set
precedence for allowing export of that. But it's not even crypto.
server.
The submitter states that the author of this software has been unresponsive
for several months.
PR: 15199
Submitted by: Akinori MUSHA aka knu <knu@idaemons.org>
It "manages" your windowmanagers by letting you choose from your
favorites on starting up X.
PR: 15133
Submitted by: Will Andrews <andrews@technologist.com>
-fwritable-strings (it would probably better to find and fix the specific
portion of Tix code responsible of the core dump but that's not easy)
Install libs and program with the 82 or 8.2 suke the name (instead of 80 or
8.0 resp.)
domain is configured and functioning correctly. It makes no
attempt to validate the data inside a domain, only the structure.
PR: 15256
Submitted by: MIHIRA Yoshiro <sanpei@sanpei.org>
