summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMike Frysinger <vapier@gentoo.org>2004-12-29 01:19:00 +0000
committerMike Frysinger <vapier@gentoo.org>2004-12-29 01:19:00 +0000
commit889328d100c965337eb3dbae14438af258b61b59 (patch)
tree13169d3c54ed2d1ac3c6c9b2157d1438bb0a4197 /net-misc/openssh
parentChange encoding to UTF-8 for GLEP 31 compliance (diff)
downloadhistorical-889328d100c965337eb3dbae14438af258b61b59.tar.gz
historical-889328d100c965337eb3dbae14438af258b61b59.tar.bz2
historical-889328d100c965337eb3dbae14438af258b61b59.zip
remove older ebuilds
Diffstat (limited to 'net-misc/openssh')
-rw-r--r--net-misc/openssh/Manifest12
-rw-r--r--net-misc/openssh/files/digest-openssh-3.7.1_p2-r22
-rw-r--r--net-misc/openssh/files/digest-openssh-3.8.1_p12
-rw-r--r--net-misc/openssh/files/digest-openssh-3.8_p12
-rw-r--r--net-misc/openssh/openssh-3.7.1_p2-r2.ebuild157
-rw-r--r--net-misc/openssh/openssh-3.8.1_p1.ebuild132
-rw-r--r--net-misc/openssh/openssh-3.8_p1.ebuild140
7 files changed, 3 insertions, 444 deletions
diff --git a/net-misc/openssh/Manifest b/net-misc/openssh/Manifest
index fcd4b5c24051..a21395f27a72 100644
--- a/net-misc/openssh/Manifest
+++ b/net-misc/openssh/Manifest
@@ -4,26 +4,20 @@ Hash: SHA1
MD5 4c036ee248fdf0dd7157545e36a83003 ChangeLog 17347
MD5 0feff9b09e482567359625301bddce1c metadata.xml 1329
MD5 aec43e5b3a4401a4acb51363c755a729 openssh-3.7.1_p2-r1.ebuild 4113
-MD5 a028e2299c7750ee138516c268f1eeec openssh-3.7.1_p2-r2.ebuild 4644
-MD5 f80730dd66dcef312979858e358615e7 openssh-3.8.1_p1.ebuild 4064
-MD5 2358cb06c79fcfc3c2cde9444309a324 openssh-3.8_p1.ebuild 4241
MD5 5f87f18a24efe616d1dfcc5e9848946b openssh-3.8.1_p1-r1.ebuild 4241
MD5 b4353850fbc9705f26093f98055cfc69 openssh-3.8.1_p1-r2.ebuild 4266
MD5 e9523dae352f6d0b78f1574f05df7f74 openssh-3.9_p1.ebuild 4425
-MD5 2f8fc1bd837220c9708d9d8b0730fe2c files/digest-openssh-3.7.1_p2-r2 142
MD5 2f8fc1bd837220c9708d9d8b0730fe2c files/digest-openssh-3.7.1_p2-r1 142
MD5 7880e18b2a91e5927810dddc7bda270f files/openssh-3.7.1_p1-selinux.diff.bz2 1353
MD5 b912e51afc37c43afef30d1f4aaee55a files/openssh-skeychallenge-args.diff.bz2 424
MD5 b86ae0c43a704c4ee2abd2ce5c955f8f files/sshd.pam 294
MD5 0a1428803057b7d25e624c6b297980d8 files/sshd.rc6 1281
MD5 7a205083ec21bedffb0adc331d587291 files/openssh-3.7.1_p2-skey.patch.bz2 272
-MD5 e62c6cfae268e95fb406080c91713c1a files/digest-openssh-3.8_p1 138
MD5 6d3c9b201c2e89b7156b2fc37ade9721 files/openssh-3.8.1_p1-chroot.patch.bz2 1119
MD5 6d3c9b201c2e89b7156b2fc37ade9721 files/openssh-3.8_p1-chroot.patch.bz2 1119
MD5 857f14fd111169d8838d07fb46769938 files/openssh-3.8_p1-kerberos.patch.bz2 465
MD5 a26faff36f0ec463cb4ef7366bfdc1e1 files/openssh-3.8_p1-resolv_functions.patch.bz2 315
MD5 465aab818202ddb010f0bfca738e902a files/openssh-3.8_p1-skey.patch.bz2 270
-MD5 7c16095191b5dc9d653dcb658650c88c files/digest-openssh-3.8.1_p1 141
MD5 857f14fd111169d8838d07fb46769938 files/openssh-3.8.1_p1-kerberos.patch.bz2 465
MD5 a26faff36f0ec463cb4ef7366bfdc1e1 files/openssh-3.8.1_p1-resolv_functions.patch.bz2 315
MD5 465aab818202ddb010f0bfca738e902a files/openssh-3.8.1_p1-skey.patch.bz2 270
@@ -46,7 +40,7 @@ MD5 93d19c0ef91091a730510c46ab8e811e files/openssh-3.9_p1-selinux.diff.bz2 1307
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.9.10 (GNU/Linux)
-iD8DBQFB0gW8roRuSHgZdywRAvEqAJkB+GiuyQoy1KsMavLwWzmTndUB1gCdEv5t
-H/7P4QEMLeqsERMt/DX5dKw=
-=2VDS
+iD8DBQFB0gYaroRuSHgZdywRAmq/AJ9OvivN/Mzd2eeY+2ynKXK3EQva+gCfc9Im
+bEYuUfprH+7N/wBqoIQXVXg=
+=RQ3O
-----END PGP SIGNATURE-----
diff --git a/net-misc/openssh/files/digest-openssh-3.7.1_p2-r2 b/net-misc/openssh/files/digest-openssh-3.7.1_p2-r2
deleted file mode 100644
index 920c333856ca..000000000000
--- a/net-misc/openssh/files/digest-openssh-3.7.1_p2-r2
+++ /dev/null
@@ -1,2 +0,0 @@
-MD5 61cf5b059938718308836d00f6764a94 openssh-3.7.1p2.tar.gz 792280
-MD5 83e000a867eba10ef7f18c169d979360 openssh-3.7.1p2+x509g2.diff.gz 125455
diff --git a/net-misc/openssh/files/digest-openssh-3.8.1_p1 b/net-misc/openssh/files/digest-openssh-3.8.1_p1
deleted file mode 100644
index a63345a1d3fc..000000000000
--- a/net-misc/openssh/files/digest-openssh-3.8.1_p1
+++ /dev/null
@@ -1,2 +0,0 @@
-MD5 1dbfd40ae683f822ae917eebf171ca42 openssh-3.8.1p1.tar.gz 817932
-MD5 52e42ecdf2b0498220661d4bf1cfaeae openssh-3.8.1p1+x509h.diff.gz 143652
diff --git a/net-misc/openssh/files/digest-openssh-3.8_p1 b/net-misc/openssh/files/digest-openssh-3.8_p1
deleted file mode 100644
index 2836f4e49436..000000000000
--- a/net-misc/openssh/files/digest-openssh-3.8_p1
+++ /dev/null
@@ -1,2 +0,0 @@
-MD5 7861a4c0841ab69a6eec5c747daff6fb openssh-3.8p1.tar.gz 826588
-MD5 de6735cdee8a0aa1eeba0960d58d0130 openssh-3.8p1+x509g4.diff.gz 130727
diff --git a/net-misc/openssh/openssh-3.7.1_p2-r2.ebuild b/net-misc/openssh/openssh-3.7.1_p2-r2.ebuild
deleted file mode 100644
index c384f22217e5..000000000000
--- a/net-misc/openssh/openssh-3.7.1_p2-r2.ebuild
+++ /dev/null
@@ -1,157 +0,0 @@
-# Copyright 1999-2004 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/openssh/openssh-3.7.1_p2-r2.ebuild,v 1.23 2004/11/04 02:49:52 vapier Exp $
-
-inherit eutils flag-o-matic ccc gnuconfig
-
-# Make it more portable between straight releases
-# and _p? releases.
-PARCH=${P/_/}
-
-X509_PATCH="${PARCH}+x509g2.diff.gz"
-SELINUX_PATCH="openssh-3.7.1_p1-selinux.diff"
-
-S=${WORKDIR}/${PARCH}
-DESCRIPTION="Port of OpenBSD's free SSH release"
-HOMEPAGE="http://www.openssh.com/"
-SRC_URI="mirror://openbsd/OpenSSH/portable/${PARCH}.tar.gz
- X509? ( http://roumenpetrov.info/openssh/x509g2/${X509_PATCH} )"
-
-LICENSE="as-is"
-SLOT="0"
-KEYWORDS="x86 ~ppc sparc alpha mips hppa amd64 ia64 ~ppc64"
-IUSE="ipv6 static pam tcpd kerberos skey selinux X509 chroot ldap"
-
-# openssh recognizes when openssl has been slightly upgraded and refuses to run.
-# This new rev will use the new openssl.
-RDEPEND="virtual/libc
- pam? ( >=sys-libs/pam-0.73
- >=sys-apps/shadow-4.0.2-r2 )
- !mips? ( kerberos? ( virtual/krb5 ) )
- selinux? ( sys-libs/libselinux )
- !ppc64? ( skey? ( >=app-admin/skey-1.1.5-r1 ) )
- >=dev-libs/openssl-0.9.6d
- >=sys-libs/zlib-1.1.4
- !ppc64? ( tcpd? ( >=sys-apps/tcp-wrappers-7.6 ) )"
-DEPEND="${RDEPEND}
- virtual/os-headers
- dev-lang/perl
- sys-apps/groff
- >=sys-apps/sed-4"
-PROVIDE="virtual/ssh"
-
-src_unpack() {
- unpack ${PARCH}.tar.gz ; cd ${S}
-
- epatch ${FILESDIR}/${P}-kerberos.patch.bz2
-
- use selinux && epatch ${FILESDIR}/${SELINUX_PATCH}.bz2
- use alpha && epatch ${FILESDIR}/${PN}-3.5_p1-gentoo-sshd-gcc3.patch.bz2
- use X509 && epatch ${DISTDIR}/${X509_PATCH}
-
- # looks like this one was rewriten somewhat.
- # epatch ${FILESDIR}/${P}-memory-bugs.patch
-
- use skey && {
- # prevent the conftest from violating the sandbox
- epatch ${FILESDIR}/${P}-skey.patch.bz2
-
- # updates to skey implementation.
- epatch ${FILESDIR}/${PN}-skeychallenge-args.diff.bz2
- }
-
- # feature request bug #26615
- use chroot && epatch ${FILESDIR}/${PN}-${PV}-chroot.patch.bz2
-}
-
-src_compile() {
- use ldap && filter-flags -funroll-loops
- use static && append-ldflags -static
- export LDFLAGS
-
-
- autoconf
-
- local myconf
-
- # Allow OpenSSH to detect mips systems
- gnuconfig_update
-
- myconf="\
- $( use_with tcpd tcp-wrappers ) \
- $( use_with kerberos kerberos5 ) \
- $( use_with pam ) \
- $( use_with skey )"
-
- use ipv6 || myconf="${myconf} --with-ipv4-default"
-
- # make sure .sbss is large enough
- use skey && use alpha && append-ldflags -mlarge-data
-
- use selinux && append-flags "-DWITH_SELINUX"
-
- ./configure \
- --prefix=/usr \
- --sysconfdir=/etc/ssh \
- --mandir=/usr/share/man \
- --libexecdir=/usr/lib/misc \
- --datadir=/usr/share/openssh \
- --disable-suid-ssh \
- --with-privsep-path=/var/empty \
- --with-privsep-user=sshd \
- --with-md5-passwords \
- --host=${CHOST} \
- ${myconf} \
- || die "bad configure"
-
-# use static && {
-# # statically link to libcrypto -- good for the boot cd
-# sed -i "s:-lcrypto:/usr/lib/libcrypto.a:g" Makefile
-# }
-
- emake || die "compile problem"
-}
-
-src_install() {
- make install-files DESTDIR=${D} || die
- chmod 600 ${D}/etc/ssh/sshd_config
- dodoc ChangeLog CREDITS OVERVIEW README* TODO sshd_config
- insinto /etc/pam.d ; newins ${FILESDIR}/sshd.pam sshd
- exeinto /etc/init.d ; newexe ${FILESDIR}/sshd.rc6 sshd
- keepdir /var/empty
- dosed "/^#Protocol /s:.*:Protocol 2:" /etc/ssh/sshd_config
- use pam && dosed "/^#UsePAM /s:.*:UsePAM yes:" /etc/ssh/sshd_config
-}
-
-pkg_postinst() {
- # empty dir for the new priv separation auth chroot..
- #install -d -m0755 -o root -g root ${ROOT}/var/empty
- # install doesn't seem to be doing its job, on amd64 at least
- # Brad House <brad_mssw@gentoo.org> 01/10/2004
- if [ ! -d "${ROOT}/var/empty" ]
- then
- mkdir -p "${ROOT}/var/empty"
- chmod 0755 "${ROOT}/var/empty"
- chown root:root "${ROOT}/var/empty"
- fi
-
- enewgroup sshd 22
- enewuser sshd 22 /bin/false /var/empty sshd
-
- ewarn "Remember to merge your config files in /etc/ssh/ and then"
- ewarn "restart sshd: '/etc/init.d/sshd restart'."
- ewarn
- einfo "As of version 3.4 the default is to enable the UsePrivelegeSeparation"
- einfo "functionality, but please ensure that you do not explicitly disable"
- einfo "this in your configuration as disabling it opens security holes"
- einfo
- einfo "This revision has removed your sshd user id and replaced it with a"
- einfo "new one with UID 22. If you have any scripts or programs that"
- einfo "that referenced the old UID directly, you will need to update them."
- einfo
- use pam >/dev/null 2>&1 && {
- einfo "Please be aware users need a valid shell in /etc/passwd"
- einfo "in order to be allowed to login."
- einfo
- }
-}
diff --git a/net-misc/openssh/openssh-3.8.1_p1.ebuild b/net-misc/openssh/openssh-3.8.1_p1.ebuild
deleted file mode 100644
index a33745c1471e..000000000000
--- a/net-misc/openssh/openssh-3.8.1_p1.ebuild
+++ /dev/null
@@ -1,132 +0,0 @@
-# Copyright 1999-2004 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/openssh/openssh-3.8.1_p1.ebuild,v 1.14 2004/11/04 02:49:52 vapier Exp $
-
-inherit eutils flag-o-matic ccc gnuconfig
-
-# Make it more portable between straight releases
-# and _p? releases.
-PARCH=${P/_/}
-
-X509_PATCH="${PARCH}+x509h.diff.gz"
-SELINUX_PATCH="openssh-3.7.1_p1-selinux.diff"
-
-S=${WORKDIR}/${PARCH}
-DESCRIPTION="Port of OpenBSD's free SSH release"
-HOMEPAGE="http://www.openssh.com/"
-SRC_URI="mirror://openbsd/OpenSSH/portable/${PARCH}.tar.gz
- X509? ( http://roumenpetrov.info/openssh/x509h/${X509_PATCH} )"
-
-LICENSE="as-is"
-SLOT="0"
-KEYWORDS="~x86 ppc ~sparc ~mips alpha arm hppa ~amd64 ~ia64 ~ppc64 s390"
-IUSE="ipv6 static pam tcpd kerberos skey selinux chroot X509 ldap"
-
-# openssh recognizes when openssl has been slightly upgraded and refuses to run.
-# This new rev will use the new openssl.
-RDEPEND="virtual/libc
- pam? ( >=sys-libs/pam-0.73
- >=sys-apps/shadow-4.0.2-r2 )
- !mips? ( kerberos? ( virtual/krb5 ) )
- selinux? ( sys-libs/libselinux )
- !ppc64? ( skey? ( >=app-admin/skey-1.1.5-r1 ) )
- >=dev-libs/openssl-0.9.6d
- >=sys-libs/zlib-1.1.4
- !ppc64? ( tcpd? ( >=sys-apps/tcp-wrappers-7.6 ) )"
-DEPEND="${RDEPEND}
- virtual/os-headers
- dev-lang/perl
- sys-apps/groff
- >=sys-apps/sed-4
- sys-devel/autoconf"
-PROVIDE="virtual/ssh"
-
-src_unpack() {
- unpack ${PARCH}.tar.gz ; cd ${S}
-
- epatch ${FILESDIR}/${P}-resolv_functions.patch.bz2
-
- use selinux && epatch ${FILESDIR}/${SELINUX_PATCH}.bz2
- use alpha && epatch ${FILESDIR}/${PN}-3.5_p1-gentoo-sshd-gcc3.patch.bz2
- use skey && epatch ${FILESDIR}/${P}-skey.patch.bz2
- use chroot && epatch ${FILESDIR}/${P}-chroot.patch.bz2
- use X509 && epatch ${DISTDIR}/${X509_PATCH}
-}
-
-src_compile() {
- gnuconfig_update
-
- # make sure .sbss is large enough
- use skey && use alpha && append-ldflags -mlarge-data
- use ldap && filter-flags -funroll-loops
- use selinux && append-flags "-DWITH_SELINUX"
- use static && append-ldflags -static
- export LDFLAGS
-
- autoconf
-
- local myconf="\
- $( use_with tcpd tcp-wrappers ) \
- $( use_with pam ) \
- $( use_with skey )"
-
- use ipv6 || myconf="${myconf} --with-ipv4-default"
- use kerberos && myconf="${myconf} --with-kerberos5=/usr" || \
- myconf="${myconf} --without-kerberos5"
-
- echo ${myconf}
-
- ./configure \
- --prefix=/usr \
- --sysconfdir=/etc/ssh \
- --mandir=/usr/share/man \
- --libexecdir=/usr/lib/misc \
- --datadir=/usr/share/openssh \
- --disable-suid-ssh \
- --with-privsep-path=/var/empty \
- --with-privsep-user=sshd \
- --with-md5-passwords \
- --host=${CHOST} \
- ${myconf} \
- || die "bad configure"
-
-# use static && {
-# # statically link to libcrypto -- good for the boot cd
-# sed -i "s:-lcrypto:/usr/lib/libcrypto.a:g" Makefile
-# }
-
- emake || die "compile problem"
-}
-
-src_install() {
- make install-files DESTDIR=${D} || die
- chmod 600 ${D}/etc/ssh/sshd_config
- dodoc ChangeLog CREDITS OVERVIEW README* TODO sshd_config
- insinto /etc/pam.d ; newins ${FILESDIR}/sshd.pam sshd
- exeinto /etc/init.d ; newexe ${FILESDIR}/sshd.rc6 sshd
- keepdir /var/empty
- dosed "/^#Protocol /s:.*:Protocol 2:" /etc/ssh/sshd_config
- use pam && dosed "/^#UsePAM /s:.*:UsePAM yes:" /etc/ssh/sshd_config
-}
-
-pkg_postinst() {
- enewgroup sshd 22
- enewuser sshd 22 /bin/false /var/empty sshd
-
- ewarn "Remember to merge your config files in /etc/ssh/ and then"
- ewarn "restart sshd: '/etc/init.d/sshd restart'."
- ewarn
- einfo "As of version 3.4 the default is to enable the UsePrivelegeSeparation"
- einfo "functionality, but please ensure that you do not explicitly disable"
- einfo "this in your configuration as disabling it opens security holes"
- einfo
- einfo "This revision has removed your sshd user id and replaced it with a"
- einfo "new one with UID 22. If you have any scripts or programs that"
- einfo "that referenced the old UID directly, you will need to update them."
- einfo
- use pam >/dev/null 2>&1 && {
- einfo "Please be aware users need a valid shell in /etc/passwd"
- einfo "in order to be allowed to login."
- einfo
- }
-}
diff --git a/net-misc/openssh/openssh-3.8_p1.ebuild b/net-misc/openssh/openssh-3.8_p1.ebuild
deleted file mode 100644
index 03ed6c2accf8..000000000000
--- a/net-misc/openssh/openssh-3.8_p1.ebuild
+++ /dev/null
@@ -1,140 +0,0 @@
-# Copyright 1999-2004 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/openssh/openssh-3.8_p1.ebuild,v 1.16 2004/11/04 02:49:52 vapier Exp $
-
-inherit eutils flag-o-matic ccc gnuconfig
-
-# Make it more portable between straight releases
-# and _p? releases.
-PARCH=${P/_/}
-
-X509_PATCH="${PARCH}+x509g4.diff.gz"
-SELINUX_PATCH="openssh-3.7.1_p1-selinux.diff"
-
-S=${WORKDIR}/${PARCH}
-DESCRIPTION="Port of OpenBSD's free SSH release"
-HOMEPAGE="http://www.openssh.com/"
-SRC_URI="mirror://openbsd/OpenSSH/portable/${PARCH}.tar.gz
- X509? ( http://roumenpetrov.info/openssh/x509g4/${X509_PATCH} )"
-
-LICENSE="as-is"
-SLOT="0"
-KEYWORDS="x86 ~ppc sparc ~alpha mips hppa amd64 ~ia64 ~ppc64 s390"
-IUSE="ipv6 static pam tcpd kerberos skey selinux chroot X509 ldap"
-
-# openssh recognizes when openssl has been slightly upgraded and refuses to run.
-# This new rev will use the new openssl.
-RDEPEND="virtual/libc
- pam? ( >=sys-libs/pam-0.73
- >=sys-apps/shadow-4.0.2-r2 )
- !mips? ( kerberos? ( virtual/krb5 ) )
- selinux? ( sys-libs/libselinux )
- !ppc64? ( skey? ( >=app-admin/skey-1.1.5-r1 ) )
- >=dev-libs/openssl-0.9.6d
- >=sys-libs/zlib-1.1.4
- !ppc64? ( tcpd? ( >=sys-apps/tcp-wrappers-7.6 ) )"
-DEPEND="${RDEPEND}
- virtual/os-headers
- dev-lang/perl
- sys-apps/groff
- >=sys-apps/sed-4
- sys-devel/autoconf"
-PROVIDE="virtual/ssh"
-
-src_unpack() {
- unpack ${PARCH}.tar.gz ; cd ${S}
-
- epatch ${FILESDIR}/${P}-kerberos.patch.bz2
- epatch ${FILESDIR}/${P}-resolv_functions.patch.bz2
-
- use selinux && epatch ${FILESDIR}/${SELINUX_PATCH}.bz2
- use alpha && epatch ${FILESDIR}/${PN}-3.5_p1-gentoo-sshd-gcc3.patch.bz2
- use X509 && epatch ${DISTDIR}/${X509_PATCH}
-
- use skey && {
- # prevent the conftest from violating the sandbox
- epatch ${FILESDIR}/${P}-skey.patch.bz2
-
- # updates to skey implementation.
- epatch ${FILESDIR}/${PN}-skeychallenge-args.diff.bz2
- }
-
- # feature request bug #26615
- use chroot && epatch ${FILESDIR}/${P}-chroot.patch.bz2
-}
-
-src_compile() {
- # make sure .sbss is large enough
- use skey && use alpha && append-ldflags -mlarge-data
- use ldap && filter-flags -funroll-loops
- use selinux && append-flags "-DWITH_SELINUX"
- use static && append-ldflags -static
- export LDFLAGS
-
- autoconf
-
- # Allow OpenSSH to detect mips systems
- gnuconfig_update
-
- local myconf="\
- $( use_with tcpd tcp-wrappers ) \
- $( use_with kerberos kerberos5 ) \
- $( use_with pam ) \
- $( use_with skey )"
-
- use ipv6 || myconf="${myconf} --with-ipv4-default"
-
- ./configure \
- --prefix=/usr \
- --sysconfdir=/etc/ssh \
- --mandir=/usr/share/man \
- --libexecdir=/usr/lib/misc \
- --datadir=/usr/share/openssh \
- --disable-suid-ssh \
- --with-privsep-path=/var/empty \
- --with-privsep-user=sshd \
- --with-md5-passwords \
- --host=${CHOST} \
- ${myconf} \
- || die "bad configure"
-
-# use static && {
-# # statically link to libcrypto -- good for the boot cd
-# sed -i "s:-lcrypto:/usr/lib/libcrypto.a:g" Makefile
-# }
-
- emake || die "compile problem"
-}
-
-src_install() {
- make install-files DESTDIR=${D} || die
- chmod 600 ${D}/etc/ssh/sshd_config
- dodoc ChangeLog CREDITS OVERVIEW README* TODO sshd_config
- insinto /etc/pam.d ; newins ${FILESDIR}/sshd.pam sshd
- exeinto /etc/init.d ; newexe ${FILESDIR}/sshd.rc6 sshd
- keepdir /var/empty
- dosed "/^#Protocol /s:.*:Protocol 2:" /etc/ssh/sshd_config
- use pam && dosed "/^#UsePAM /s:.*:UsePAM yes:" /etc/ssh/sshd_config
-}
-
-pkg_postinst() {
- enewgroup sshd 22
- enewuser sshd 22 /bin/false /var/empty sshd
-
- ewarn "Remember to merge your config files in /etc/ssh/ and then"
- ewarn "restart sshd: '/etc/init.d/sshd restart'."
- ewarn
- einfo "As of version 3.4 the default is to enable the UsePrivelegeSeparation"
- einfo "functionality, but please ensure that you do not explicitly disable"
- einfo "this in your configuration as disabling it opens security holes"
- einfo
- einfo "This revision has removed your sshd user id and replaced it with a"
- einfo "new one with UID 22. If you have any scripts or programs that"
- einfo "that referenced the old UID directly, you will need to update them."
- einfo
- use pam >/dev/null 2>&1 && {
- einfo "Please be aware users need a valid shell in /etc/passwd"
- einfo "in order to be allowed to login."
- einfo
- }
-}