[ssh_x509] PKIX-SSH release 15.2

[ssh_x509 at roumenpetrov.info]

Hello,

Release PKIX-SSH 15.2 is available for download. This release is mostly 
oriented to Android OS.


(x) Security:
(*) prefer sigaction()
To send a signal in alarm signal handler is used sigaction() if 
available. This avoids logging in ssh_signal() done on error path. Note 
sigaction() should be available on all modern OS-es.


(x) Features:
(*) enhance login class based checks
Added function checks for any host restrictions and checks to see that a 
given time value is within allowed times.
Remark: FreeBSD functionality.

(*) only "addon" model on Android
Link only with application wrapper library. Stop to use application 
information library.
Remark: This allows application like SecureBox to stop to share "user 
id" with terminal application. Also, with separate id terminal 
application has only read only access to secure shell configuration.


(x) Bugs:
(*) sftp and very long symbolic link
Avoid silent truncation in sftp server readlink processing.


(x) Misc:
(*) wrap rename
Stop to wrap rename() for Android builds. It was added to allow key 
generation utility to create host-keys. With new "addon" model this is 
application responsibility.

(*) autoconf 2.72
Suppress Android large file for 32-bit platforms as well if bootstrap 
uses autoconf 2.72.

(*) path to ssh utility
Revise construction and how is used path to ssh utility is secure copy 
and file transfer programs. Note on Android is construction uses path 
running utility and this avoids communication with application.

(*) documentation
Documentation and manual page improvements. Note information related to 
DSA algorithms and keys is excluded from manual pages.


Regards,
Roumen Petrov