forcibly disable roaming support in the client

ssh client security bug fix from
http://www.openssh.com/txt/release-7.1p2

openssh client is installed in gce instances.
although it's private key is not that much sensitive
it's better to land this security patch than not.

reported initially as cve-2016-0777 and cve-2016-0778
(January 14th, 2016)

BUG: 26587626
Change-Id: I113d576a3522ded8cb0f4a2e117999b0c51d4364
2 files changed
tree: 1891448e4916006295cf504d5e650cc83c1803ca
  1. Android.mk
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. PROTOCOL
  9. PROTOCOL.agent
  10. PROTOCOL.certkeys
  11. PROTOCOL.chacha20poly1305
  12. PROTOCOL.key
  13. PROTOCOL.krl
  14. PROTOCOL.mux
  15. README
  16. README.dns
  17. README.platform
  18. README.privsep
  19. README.tun
  20. README.version
  21. TODO
  22. aclocal.m4
  23. addrmatch.c
  24. atomicio.c
  25. atomicio.h
  26. audit-bsm.c
  27. audit-linux.c
  28. audit.c
  29. audit.h
  30. auth-bsdauth.c
  31. auth-chall.c
  32. auth-krb5.c
  33. auth-options.c
  34. auth-options.h
  35. auth-pam.c
  36. auth-pam.h
  37. auth-passwd.c
  38. auth-rh-rsa.c
  39. auth-rhosts.c
  40. auth-rsa.c
  41. auth-shadow.c
  42. auth-sia.c
  43. auth-sia.h
  44. auth-skey.c
  45. auth.c
  46. auth.h
  47. auth1.c
  48. auth2-chall.c
  49. auth2-gss.c
  50. auth2-hostbased.c
  51. auth2-kbdint.c
  52. auth2-none.c
  53. auth2-passwd.c
  54. auth2-pubkey.c
  55. auth2.c
  56. authfd.c
  57. authfd.h
  58. authfile.c
  59. authfile.h
  60. bitmap.c
  61. bitmap.h
  62. blocks.c
  63. bufaux.c
  64. bufbn.c
  65. bufec.c
  66. buffer.c
  67. buffer.h
  68. buildpkg.sh.in
  69. canohost.c
  70. canohost.h
  71. chacha.c
  72. chacha.h
  73. channels.c
  74. channels.h
  75. cipher-3des1.c
  76. cipher-aes.c
  77. cipher-aesctr.c
  78. cipher-aesctr.h
  79. cipher-bf1.c
  80. cipher-chachapoly.c
  81. cipher-chachapoly.h
  82. cipher-ctr.c
  83. cipher.c
  84. cipher.h
  85. cleanup.c
  86. clientloop.c
  87. clientloop.h
  88. compat.c
  89. compat.h
  90. config.guess
  91. config.h
  92. config.h.in
  93. config.sub
  94. configure
  95. configure.ac
  96. contrib/
  97. crc32.c
  98. crc32.h
  99. crypto_api.h
  100. deattack.c
  101. deattack.h
  102. defines.h
  103. dh.c
  104. dh.h
  105. digest-libc.c
  106. digest-openssl.c
  107. digest.h
  108. dispatch.c
  109. dispatch.h
  110. dns.c
  111. dns.h
  112. ed25519.c
  113. entropy.c
  114. entropy.h
  115. fatal.c
  116. fe25519.c
  117. fe25519.h
  118. fixalgorithms
  119. fixpaths
  120. fixprogs
  121. ge25519.c
  122. ge25519.h
  123. ge25519_base.data
  124. groupaccess.c
  125. groupaccess.h
  126. gss-genr.c
  127. gss-serv-krb5.c
  128. gss-serv.c
  129. hash.c
  130. hmac.c
  131. hmac.h
  132. hostfile.c
  133. hostfile.h
  134. includes.h
  135. install-sh
  136. kex.c
  137. kex.h
  138. kexc25519.c
  139. kexc25519c.c
  140. kexc25519s.c
  141. kexdh.c
  142. kexdhc.c
  143. kexdhs.c
  144. kexecdh.c
  145. kexecdhc.c
  146. kexecdhs.c
  147. kexgex.c
  148. kexgexc.c
  149. kexgexs.c
  150. key.c
  151. key.h
  152. krl.c
  153. krl.h
  154. log.c
  155. log.h
  156. loginrec.c
  157. loginrec.h
  158. logintest.c
  159. mac.c
  160. mac.h
  161. match.c
  162. match.h
  163. md-sha256.c
  164. md5crypt.c
  165. md5crypt.h
  166. mdoc2man.awk
  167. misc.c
  168. misc.h
  169. mkinstalldirs
  170. moduli
  171. moduli.0
  172. moduli.5
  173. moduli.c
  174. monitor.c
  175. monitor.h
  176. monitor_fdpass.c
  177. monitor_fdpass.h
  178. monitor_mm.c
  179. monitor_mm.h
  180. monitor_wrap.c
  181. monitor_wrap.h
  182. msg.c
  183. msg.h
  184. mux.c
  185. myproposal.h
  186. nchan.c
  187. nchan.ms
  188. nchan2.ms
  189. opacket.c
  190. opacket.h
  191. openbsd-compat/
  192. openssh.xml.in
  193. opensshd.init.in
  194. packet.c
  195. packet.h
  196. pathnames.h
  197. pkcs11.h
  198. platform.c
  199. platform.h
  200. poly1305.c
  201. poly1305.h
  202. progressmeter.c
  203. progressmeter.h
  204. readconf.c
  205. readconf.h
  206. readpass.c
  207. rijndael.c
  208. rijndael.h
  209. roaming.h
  210. roaming_client.c
  211. roaming_common.c
  212. roaming_dummy.c
  213. roaming_serv.c
  214. rsa.c
  215. rsa.h
  216. sandbox-capsicum.c
  217. sandbox-darwin.c
  218. sandbox-null.c
  219. sandbox-rlimit.c
  220. sandbox-seccomp-filter.c
  221. sandbox-systrace.c
  222. sc25519.c
  223. sc25519.h
  224. scp.0
  225. scp.1
  226. scp.c
  227. servconf.c
  228. servconf.h
  229. serverloop.c
  230. serverloop.h
  231. session.c
  232. session.h
  233. sftp-client.c
  234. sftp-client.h
  235. sftp-common.c
  236. sftp-common.h
  237. sftp-glob.c
  238. sftp-server-main.c
  239. sftp-server.0
  240. sftp-server.8
  241. sftp-server.c
  242. sftp.0
  243. sftp.1
  244. sftp.c
  245. sftp.h
  246. smult_curve25519_ref.c
  247. ssh-add.0
  248. ssh-add.1
  249. ssh-add.c
  250. ssh-agent.0
  251. ssh-agent.1
  252. ssh-agent.c
  253. ssh-dss.c
  254. ssh-ecdsa.c
  255. ssh-ed25519.c
  256. ssh-gss.h
  257. ssh-keygen.0
  258. ssh-keygen.1
  259. ssh-keygen.c
  260. ssh-keyscan.0
  261. ssh-keyscan.1
  262. ssh-keyscan.c
  263. ssh-keysign.0
  264. ssh-keysign.8
  265. ssh-keysign.c
  266. ssh-pkcs11-client.c
  267. ssh-pkcs11-helper.0
  268. ssh-pkcs11-helper.8
  269. ssh-pkcs11-helper.c
  270. ssh-pkcs11.c
  271. ssh-pkcs11.h
  272. ssh-rsa.c
  273. ssh-sandbox.h
  274. ssh.0
  275. ssh.1
  276. ssh.c
  277. ssh.h
  278. ssh1.h
  279. ssh2.h
  280. ssh_api.c
  281. ssh_api.h
  282. ssh_config
  283. ssh_config.0
  284. ssh_config.5
  285. sshbuf-getput-basic.c
  286. sshbuf-getput-crypto.c
  287. sshbuf-misc.c
  288. sshbuf.c
  289. sshbuf.h
  290. sshconnect.c
  291. sshconnect.h
  292. sshconnect1.c
  293. sshconnect2.c
  294. sshd.0
  295. sshd.8
  296. sshd.c
  297. sshd_config
  298. sshd_config.0
  299. sshd_config.5
  300. sshd_config.android
  301. ssherr.c
  302. ssherr.h
  303. sshkey.c
  304. sshkey.h
  305. sshlogin.c
  306. sshlogin.h
  307. sshpty.c
  308. sshpty.h
  309. sshtty.c
  310. start-ssh
  311. survey.sh.in
  312. ttymodes.c
  313. ttymodes.h
  314. uidswap.c
  315. uidswap.h
  316. umac.c
  317. umac.h
  318. umac128.c
  319. uuencode.c
  320. uuencode.h
  321. verify.c
  322. version.h
  323. xmalloc.c
  324. xmalloc.h