From mboxrd@z Thu Jan  1 00:00:00 1970
Return-path: <ptxdist-bounces@pengutronix.de>
Date: Fri, 7 Aug 2015 12:55:24 +0200
From: Clemens Gruber <clemens.gruber@pqgruber.com>
Message-ID: <20150807105524.GA11298@pqgruber.com>
References: <1437170091-7429-1-git-send-email-clemens.gruber@pqgruber.com>
 <20150807101323.GK18141@pengutronix.de>
 <20150807104548.GA24388@pengutronix.de>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <20150807104548.GA24388@pengutronix.de>
Subject: Re: [ptxdist] [PATCH] openssh: improve rc.once.d script and harden
 sshd_config
List-Id: PTXdist Development Mailing List <ptxdist.pengutronix.de>
List-Unsubscribe: <http://metis.pengutronix.de/cgi-bin/mailman/options/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=unsubscribe>
List-Archive: <http://metis.pengutronix.de/pipermail/ptxdist/>
List-Post: <mailto:ptxdist@pengutronix.de>
List-Help: <mailto:ptxdist-request@pengutronix.de?subject=help>
List-Subscribe: <http://metis.pengutronix.de/cgi-bin/mailman/listinfo/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=subscribe>
Reply-To: ptxdist@pengutronix.de
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: ptxdist-bounces@pengutronix.de
Sender: "ptxdist" <ptxdist-bounces@pengutronix.de>
To: ptxdist@pengutronix.de
Cc: Michael Olbrich <m.olbrich@pengutronix.de>
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