Re: RedHat forks OpenSSH?

[Damien Miller <djm mindrot org>]

Jos Vos wrote:
> On Tue, Nov 09, 2004 at 07:23:44AM +1100, Damien Miller wrote:
> 
> 
>>Nobody disputes Redhat's right to fork OpenSSH, but why does
>>Redhat not make their desired changes through the standard RPM
>>patching mechanism? By distributing their own OpenSSH tarballs
>>instead of patching pristine sources, Redhat breaks the link of
>>transparency, accountability and trust that their own RPM build
>>model is supposed to provide.
> 
> They do the same for "xmms", for example, to eliminate MP3 support
> *and also not ship MP3 source code*, due to possible legal issues.

Then they should also chop RC4 out of OpenSSL, OpenSSH and anything else
that implements it because its legal status is near identical.

-d