/[smeserver]/rpms/e-smith-openssh/sme10/e-smith-openssh.spec
ViewVC logotype

Annotation of /rpms/e-smith-openssh/sme10/e-smith-openssh.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.7 - (hide annotations) (download)
Fri Feb 19 04:11:15 2021 UTC (3 years, 8 months ago) by jpp
Branch: MAIN
Changes since 1.6: +7 -2 lines
* Thu Feb 18 2021 Jean-Philipe Pialasse <tests@pialasse.com> 2.6.0-5.sme
- increase default host key size [SME: 11359]

1 jpp 1.7 # $Id: e-smith-openssh.spec,v 1.6 2020/12/11 20:42:24 jpp Exp $
2 stephdl 1.1
3     Summary: e-smith module to configure and enable ssh
4     %define name e-smith-openssh
5     Name: %{name}
6     %define version 2.6.0
7 jpp 1.7 %define release 5
8 stephdl 1.1 Version: %{version}
9     Release: %{release}%{?dist}
10     License: GPL
11     Group: Networking/Daemons
12     Source: %{name}-%{version}.tar.xz
13 jpp 1.2 Patch0: e-smith-openssh-2.6.0-bz10621-bz10937.patch
14 jpp 1.3 Patch1: e-smith-openssh-2.6.0-bz9893-autoblock-whitelist.patch
15 jpp 1.4 Patch2: e-smith-openssh-2.6.0-bz10939-denyhosts.patch
16 jpp 1.5 Patch3: e-smith-openssh-2.6.0-bz11147-bz11109-systemd-update.patch
17 jpp 1.7 Patch4: e-smith-openssh-2.6.0-bz11359.patch
18 jpp 1.3
19 stephdl 1.1 BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
20     BuildRequires: e-smith-devtools
21     BuildArchitectures: noarch
22     Requires: e-smith, openssl,
23     Requires: openssh >= 3.5
24     Requires: openssh-clients
25     Requires: openssh-server
26     Requires: e-smith-lib >= 1.15.1-19
27     Requires: runit
28     AutoReqProv: no
29    
30     %changelog
31 jpp 1.7 * Thu Feb 18 2021 Jean-Philipe Pialasse <tests@pialasse.com> 2.6.0-5.sme
32     - increase default host key size [SME: 11359]
33    
34 jpp 1.4 * Fri Dec 11 2020 Jean-Philipe Pialasse <tests@pialasse.com> 2.6.0-4.sme
35     - add support for denyhost [SME: 10939]
36 jpp 1.5 - move sshd to systemd [SME: 11109]
37     - create -update event [SME: 11147]
38     - add ed25519 and ecdsa hostkeys [SME: 10940]
39 jpp 1.4
40 jpp 1.3 * Sun May 03 2020 Jean-Philipe Pialasse <tests@pialasse.com> 2.6.0-3.sme
41     - add Whitelist to AutoBlock using property sshd ValidFrom [SME: 9893]
42    
43 jpp 1.2 * Sat May 02 2020 Jean-Philipe Pialasse <tests@pialasse.com> 2.6.0-2.sme
44     - update client ciphers to use [SME: 10621]
45     - add ciphers, macs and KexAlgorithms for server [SME: 10937]
46    
47 stephdl 1.1 * Fri Feb 05 2016 stephane de Labrusse <stephdl@de-labrusse.fr> 2.6.0-1.sme
48     - Initial release to sme10
49    
50     * Thu Jun 25 2015 stephane de Labrusse <stephdl@de-labrusse.fr> 2.4.0-6.sme
51     - enabled the motd message [SME: 8939]
52     - Code done by John Crisp <jcrisp@safeandsoundit.co.uk> and
53     - Stefano Zamboni <zamboni@mind-at-work.it>
54    
55     * Sun Apr 6 2014 Charlie Brady <charlie_brady@mitel.com> 2.4.0-5.sme
56     - Fix use of uninitialized variables in last change. [SME: 8313]
57     - Fix error with flush of xt_recent SSH connections. [SME: 8314]
58    
59     * Sat Apr 5 2014 Chris Burnat <devlist@burnat.com> 2.4.0-4.sme
60     - Add ssh-autoblock for external interface - patch by Chris Maltby [SME: 8258]
61    
62     * Fri Nov 1 2013 Chris Burnat <devlist@burnat.com> 2.4.0-3.sme
63     - Remove SSH v1 legacy support - patch by Daniel Berteaud [SME: 6381]
64    
65     * Sat Mar 16 2013 Daniel Berteaud <daniel@firewall-services.com> 2.4.0-2.sme
66     - Make rsyslog listen to our socket [SME: 7221]
67    
68     * Wed Feb 13 2013 Shad L. Lords <slords@mail.com> 2.4.0-1.sme
69     - Roll new stream for sme9
70    
71     * Tue Mar 1 2011 Jonathan Martens <smesevrer-contribs@snetram.nl> 2.2.0-5.sme
72     - Obsolete KeepAlive and replace ClientAliveInterval and ClientAliveCountMax [SME: 6380]
73    
74     * Fri Nov 26 2010 Ian Wells <esmith@wellsi.com> 2.2.0-4.sme
75     - Change permissions of ssh_config file to 644 [SME: 43]
76    
77     * Thu Nov 25 2010 Ian Wells <esmith@wellsi.com> 2.2.0-3.sme
78     - Template ssh_config with improved defaults [SME: 43]
79    
80     * Sun Dec 28 2008 Jonathan Martens <smesevrer-contribs@snetram.nl> 2.2.0-2.sme
81     - Template sshd login grace time, kept default at 600s [SME: 4903]
82    
83     * Tue Oct 7 2008 Shad L. Lords <slords@mail.com> 2.2.0-1.sme
84     - Roll new stream to separate sme7/sme8 trees [SME: 4633]
85    
86     * Wed Jan 09 2008 Stephen Noble <support@dungog.net> 1.12.0-13
87     - Remove template fragments for /root/.ssh/config [SME: 513]
88    
89     * Tue Dec 18 2007 Shad L. Lords <slords@mail.com> 1.12.0-12
90     - Actually apply previous patch [SME: 3678]
91    
92     * Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.12.0-11
93     - Allow root to be key based login only [SME: 3678]
94    
95     * Tue Oct 23 2007 Charlie Brady <charlie_brady@mitel.com> 1.12.0-10
96     - Prevent rkhunter false positive if ssh is disabled but
97     PermitRootLogin is enabled in config. [SME: 166]
98    
99     * Sun Apr 29 2007 Shad L. Lords <slords@mail.com>
100     - Clean up spec so package can be built by koji/plague
101    
102     * Sun Apr 08 2007 Shad L. Lords <slords@mail.com> 1.12.0-9
103     - Adjust permissions on empty/sshd directory again [SME: 2711]
104    
105     * Fri Apr 06 2007 Shad L. Lords <slords@mail.com> 1.12.0-8
106     - Adjust permissions on empty/sshd directory [SME: 2711]
107    
108     * Tue Mar 06 2007 Shad L. Lords <slords@mail.com> 1.12.0-7
109     - Adjust sftp-server path in sshd_config to match openssh-servers [SME: 2470]
110    
111     * Thu Dec 07 2006 Shad L. Lords <slords@mail.com>
112     - Update to new release naming. No functional changes.
113     - Make Packager generic
114    
115     * Tue Jul 25 2006 Gordon Rowell <gordonr@gormand.com.au> 1.12.0-05
116     - Use sshd{TCPPort} for listen Port - thanks MasterSleepy [SME: 1774]
117    
118     * Tue Jul 18 2006 Charlie Brady <charlie_brady@mitel.com> 1.12.0-04
119     - Allow "UsePAM" setting to be controlled from db. [SME: 1744]
120    
121     * Wed Apr 5 2006 Gordon Rowell <gordonr@gormand.com.au> 1.12.0-03
122     - Add newline after user entries in rssh.conf [SME: 877]
123    
124     * Wed Mar 29 2006 Gordon Rowell <gordonr@gormand.com.au> 1.12.0-02
125     - Don't display /etc/motd contents from ssh [SME: 718]
126    
127     * Tue Mar 14 2006 Charlie Brady <charlie_brady@mitel.com> 1.12.0-01
128     - Roll stable stream version. [SME: 1016]
129    
130     * Mon Mar 13 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-29
131     - Expand /etc/rssh.conf in user-{create,delete,lock,modify} [SME: 877]
132    
133     * Mon Mar 13 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-28
134     - A user is allowed access to rssh protocols if:
135     - They have PasswordSet==yes
136     - They have AllowRSSH==yes or
137     VPNClientAccess==yes but not AllowRSSH==no [SME: 877]
138    
139     * Mon Mar 13 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-27
140     - Remove defaults for sshd{Allow*} and the templates for rssh.conf [SME: 877]
141     - Allow a user all of the rssh protocols if AllowSSH is yes [SME: 877]
142    
143     * Thu Mar 02 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-26
144     - Adjust sftp-server path in sshd_config to match rssh [SME: 924]
145    
146     * Wed Mar 01 2006 Charlie Brady <charlie_brady@mitel.com> 1.11.0-25
147     - Add syslog socket inside privsep chroot jail [SME: 916]
148    
149     * Tue Jan 24 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-24
150     - Default sshd{AllowRSYNC} == yes [SME: 42]
151    
152     * Mon Jan 23 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-23
153     - Add template for /etc/rssh.conf [SME: 42]
154     - Default sshd{AllowSCP, AllowSFTP} == yes [SME: 532]
155     - Default sshd{AllowRDIST,AllowRSYNC,AllowCVS} == no
156    
157     * Fri Jan 6 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-22
158     - Default sshd{PasswordAuthentication} to "no" [SME: 377]
159    
160     * Wed Nov 30 2005 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-21
161     - Bump release number only
162    
163     * Wed Aug 10 2005 Charlie Brady <charlieb@e-smith.com>
164     - [1.11.0-20]
165     - Delete test related requires (not really required) and add runit.
166    
167     * Wed Jul 20 2005 Charlie Brady <charlieb@e-smith.com>
168     - [1.11.0-19]
169     - Set $sshd{TCPPort} and remove obsolete masq template fragment. [SF: 1241409]
170    
171     * Tue Jul 19 2005 Charlie Brady <charlieb@e-smith.com>
172     - [1.11.0-18]
173     - Update to current db access APIs. [SF: 1216546]
174    
175     * Tue Jul 5 2005 Charlie Brady <charlieb@e-smith.com>
176     - [1.11.0-17]
177     - Configure MaxAuthTries (our default is 2). [SF: 1232544]
178    
179     * Thu Jun 16 2005 Charlie Brady <charlieb@e-smith.com>
180     - [1.11.0-16]
181     - Ensure that 'status' property is recognised at startup. [MN00061795]
182    
183     * Tue May 17 2005 Charlie Brady <charlieb@e-smith.com>
184     - [1.11.0-15]
185     - Default to protocol 2 only on new installs, and '2,1' for
186     upgrades where $sshd{Protocol} is not defined.
187    
188     * Mon Mar 14 2005 Charlie Brady <charlieb@e-smith.com>
189     - [1.11.0-14]
190     - Use generic_template_expand action for all template expansions from
191     sshd-conf. Update e-smith-lib dependency. [MN00064130]
192     - Replace sshd-reload with call to 'adjust-services'. [MN00065576]
193    
194     * Tue Sep 28 2004 Michael Soulier <msoulier@e-smith.com>
195     - [1.11.0-13]
196     - Updated requires with new perl dependencies. [charlieb MN00040240]
197     - Clean BuildRequires. [charlieb MN00043055]
198    
199     * Mon Dec 22 2003 Michael Soulier <msoulier@e-smith.com>
200     - [1.11.0-12]
201     - Added host key generation code to run script. [msoulier 9549]
202    
203     * Wed Dec 10 2003 Michael Soulier <msoulier@e-smith.com>
204     - [1.11.0-11]
205     - Fixed a bug in the genfilelist options. [msoulier 9549]
206    
207     * Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com>
208     - [1.11.0-10]
209     - Put full path to sshd in run script to work around assumption of full path
210     in sshd sighup handler. [msoulier 9549]
211    
212     * Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com>
213     - [1.11.0-09]
214     - Updated sshd-reload to use daemontools wrapper. [msoulier 9549]
215    
216     * Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com>
217     - [1.11.0-08]
218     - Moved the shebang line to a place where it actually matters. Tell me it's
219     friday. [msoulier 9549]
220    
221     * Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com>
222     - [1.11.0-07]
223     - Fixed a couple of typos preventing multilog from starting. [msoulier 9549]
224    
225     * Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com>
226     - [1.11.0-06]
227     - Moved initscript to /etc/init.d/supervise/sshd. [msoulier 9549]
228    
229     * Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com>
230     - [1.11.0-05]
231     - Fixed a couple of specfile typos. [msoulier 9549]
232    
233     * Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com>
234     - [1.11.0-04]
235     - Adding supervision of sshd. [msoulier 9549]
236     - Updated createlinks to latest api.
237    
238     * Tue Sep 16 2003 Charlie Brady <charlieb@e-smith.com>
239     - [1.11.0-03]
240     - Remove deprecated RhostsAuthentication from sshd_config. [charlieb 10014]
241    
242     * Thu Aug 21 2003 Charlie Brady <charlieb@e-smith.com>
243     - [1.11.0-02]
244     - Replace sshd-conf-startup action with default db fragments.
245     [charlieb 9553]
246    
247     * Thu Aug 21 2003 Charlie Brady <charlieb@e-smith.com>
248     - [1.11.0-01]
249     - Changing version to development stream number - 1.11.0
250    
251     * Thu Jun 26 2003 Charlie Brady <charlieb@e-smith.com>
252     - [1.10.0-01]
253     - Changing version to stable stream number - 1.10.0
254    
255     * Mon Apr 21 2003 Mark Knox <markk@e-smith.com>
256     - [1.9.0-10]
257     - Enforce 0600 on sshd_config [markk 8407]
258    
259     * Tue Apr 15 2003 Gordon Rowell <gordonr@e-smith.com>
260     - [1.9.0-09]
261     - Add Compression and UsePrivilegeSeparation options [gordonr 8173]
262    
263     * Tue Apr 8 2003 Michael Soulier <msoulier@e-smith.com>
264     - [1.9.0-08]
265     - Backed-out 1.9.0-07. [msoulier 5782]
266    
267     * Tue Apr 8 2003 Michael Soulier <msoulier@e-smith.com>
268     - [1.9.0-07]
269     - Shut off tcp forwarding in the daemon. [msoulier 5782]
270    
271     * Tue Apr 1 2003 Gordon Rowell <gordonr@e-smith.com>
272     - [1.9.0-06]
273     - Actually reload ssh rather than restarting in sshd-reload [gordonr 7785]
274    
275     * Tue Mar 18 2003 Lijie Deng <lijied@e-smith.com>
276     - [1.9.0-05]
277     - Deleted ./root/.ssh/config/template-begin [lijied 3295]
278    
279     * Mon Mar 17 2003 Lijie Deng <lijied@e-smith.com>
280     - [1.9.0-04]
281     - Deleted template-begin/end file [lijied 3295]
282    
283     * Tue Mar 4 2003 Charlie Brady <charlieb@e-smith.com>
284     - [1.9.0-03]
285     - s/HostsAllowSpec/hosts_allow_spec/ [charlieb 5650]
286    
287     * Fri Feb 28 2003 Charlie Brady <charlieb@e-smith.com>
288     - [1.9.0-02]
289     - Re-do hosts.allow template to use esmith::ConfigDB::HostsAllowSpec.
290     Add dependency on up-to-date e-smith-lib. [charlieb 5650]
291    
292     * Fri Feb 28 2003 Charlie Brady <charlieb@e-smith.com>
293     - [1.9.0-01]
294     - Roll development stream to 1.9.0
295    
296     * Mon Feb 24 2003 Charlie Brady <charlieb@e-smith.com>
297     - [1.8.0-02]
298     - Allow MaxStartups to be tunable from the config DB [charlieb 7362]
299    
300     * Fri Oct 11 2002 Charlie Brady <charlieb@e-smith.com>
301     - [1.8.0-01]
302     - Rolling stable version number to 1.8.0
303    
304     * Wed Oct 2 2002 Mark Knox <markk@e-smith.com>
305     - [1.7.3-04]
306     - Remove stray braces in hosts.allow template [markk 3786]
307    
308     * Mon Sep 23 2002 Charlie Brady <charlieb@e-smith.com>
309     - [1.7.3-03]
310     - Fix hosts.allow template problem introduced by last change [charlieb 3786]
311    
312     * Tue Sep 10 2002 Mark Knox <markk@e-smith.com>
313     - [1.7.3-02]
314     - Remove deprecated split on pipe [markk 3786]
315    
316     * Tue Aug 20 2002 Charlie Brady <charlieb@e-smith.com>
317     - [1.7.3-01]
318     - Add rc7.d symlink and don't set deprecated InitscriptsOrder property
319     [charlieb 4458]
320     - Change use of allow_tcp_in() function to allow dynamic reconfig.
321     [charlieb 4501]
322    
323     * Thu Aug 8 2002 Charlie Brady <charlieb@e-smith.com>
324     - [1.7.2-01]
325     - Change masq script fragment to use allow_tcp_in() function. [charlieb 4499]
326    
327     * Wed Jul 17 2002 Charlie Brady <charlieb@e-smith.com>
328     - [1.7.1-01]
329     - Change masq script fragment to use iptables. [charlieb 1268]
330    
331     * Wed Jun 5 2002 Charlie Brady <charlieb@e-smith.com>
332     - [1.7.0-01]
333     - Changing version to maintained stream number to 1.7.0
334    
335     * Fri May 31 2002 Charlie Brady <charlieb@e-smith.com>
336     - [1.6.0-01]
337     - Changing version to maintained stream number to 1.6.0
338    
339     * Thu May 23 2002 Gordon Rowell <gordonr@e-smith.com>
340     - [1.5.6-01]
341     - RPM rebuild forced by cvsroot2rpm
342    
343     * Mon May 13 2002 Kirrily Robert <skud@e-smith.com>
344     - [1.5.5-01]
345     - Added buildtests [skud 2932]
346    
347     * Fri Apr 26 2002 Tony Clayton <apc@e-smith.com>
348     - [1.5.4-01]
349     - add -t option to ssh-keygen call in sshd-conf [tonyc]
350    
351     * Fri Mar 6 2002 Michael G Schwern <schwern@e-smith.com>
352     - [1.5.3-01]
353     - Tested & documented sshd-reload action [schwern 2932]
354     - Tested & documented sshd-conf and sshd-conf-startup actions [schwern 2932]
355     - Changed all actions to use esmith::ConfigDB [schwern 2932]
356     - Fixed dependencies. [schwern]
357    
358     * Thu Feb 14 2002 Kirrily Robert <skud@e-smith.com>
359     - [1.5.2-01]
360     - CVS testing
361    
362     * Thu Feb 14 2002 Kirrily Robert <skud@e-smith.com>
363     - [1.5.0-01]
364     - rollRPM: Rolled version number to 1.5.0-01. Includes patches up to 1.4.0-06.
365    
366     * Mon Nov 05 2001 Charlie Brady <charlieb@e-smith.com>
367     - [1.4.0-06]
368     - Remove obsoleted "CheckMail no" fragment from sshd_config template.
369    
370     * Tue Aug 28 2001 Gordon Rowell <gordonr@e-smith.com>
371     - [1.4.0-05]
372     - Removed links from deprecated post-restore event
373    
374     * Fri Aug 17 2001 gordonr
375     - [1.4.0-04]
376     - Autorebuild by rebuildRPM
377    
378     * Tue Aug 14 2001 Charlie Brady <charlieb@e-smith.com>
379     - [1.4.0-03]
380     - Change back to Protocol 1 until known_hosts2 and authorized_keys2 files are
381     implemented on both sides.
382    
383     * Tue Aug 14 2001 Charlie Brady <charlieb@e-smith.com>
384     - [1.4.0-02]
385     - Add template fragements to generate /root/.ssh/config host
386     config sections for any hostnames added to %e_smith_hosts by
387     other fragements numbered between 00 and 19.
388     - Delete useless template-end for /root/.ssh/config.
389    
390     * Wed Aug 8 2001 Charlie Brady <charlieb@e-smith.com>
391     - [1.4.0-01]
392     - Rolled version number to 1.4.0-01. Includes patches upto 1.3.0-10.
393    
394     * Wed Aug 8 2001 Gordon Rowell <gordonr@e-smith.com>
395     - [1.3.0-10]
396     - Use restart instead of reload as some initscripts don't have the latter
397    
398     * Sun Jul 8 2001 Gordon Rowell <gordonr@e-smith.com>
399     - [1.3.0-09]
400     - Check "access" property of sshd service
401    
402     * Fri Jul 6 2001 Peter Samuel <peters@e-smith.com>
403     - [1.3.0-08]
404     - Changed license to GPL
405    
406     * Thu Jul 05 2001 Gordon Rowell <gordonr@e-smith.com>
407     - [1.3.0-07]
408     - Explicitly disable ChallengeResponseAuthentication and
409     KbdInteractiveAuthentication
410    
411     * Wed May 30 2001 Gordon Rowell <gordonr@e-smith.com>
412     - [1.3.0-06]
413     - Added HostKey line for /etc/ssh/ssh_host_rsa_key for SSH version 2
414    
415     * Tue May 29 2001 Tony Clayton <tonyc@e-smith.com>
416     - [1.3.0-05]
417     - fixed actions that had tied %conf when calling serviceControl (2 actions)
418    
419     * Mon May 21 2001 Gordon Rowell <gordonr@e-smith.com>
420     - [1.3.0-04]
421     - Added links to /usr/libexec and /usr/local/libexec to enable
422     sftp for more client systems under protocol V1
423    
424     * Mon May 21 2001 Gordon Rowell <gordonr@e-smith.com>
425     - [1.3.0-03]
426     - Revised after comments from Charlie
427     - Added documentation for MaxStartups and cleaner perl idiom for
428     SubsystemSftp test
429    
430     * Mon May 21 2001 Gordon Rowell <gordonr@e-smith.com>
431     - [1.3.0-02]
432     - Enabled sftp subsystem by default with correct path to sftp-server
433     - Added MaxStartups configuration
434    
435     * Mon May 21 2001 Gordon Rowell <gordonr@e-smith.com>
436     - [1.3.0-01]
437     - Rolled version number to 1.3.0-01. Includes patches upto 1.2.0-06.
438    
439     * Wed May 09 2001 Tony Clayton <tonyc@e-smith.com>
440     - [1.2.0-06]
441     - Forgot to add last patch to %setup. Adding it now.
442    
443     * Wed May 09 2001 Tony Clayton <tonyc@e-smith.com>
444     - [1.2.0-05]
445     - Add /root/.ssh/config template-{begin,end} fragments
446     - Expand config template from sshd-conf
447    
448     * Thu Apr 27 2001 Gordon Rowell <gordonr@e-smith.com>
449     - [1.2.0-04]
450     - Rolled version for GPG signing - no change
451    
452     * Mon Apr 9 2001 Gordon Rowell <gordonr@e-smith.com>
453     - [1.2.0-03]
454     - Extra HostKey line for openssh-2.5
455    
456     * Thu Feb 8 2001 Adrian Chung <adrianc@e-smith.com>
457     - [1.2.0-02]
458     - Rolling release number for GPG signing.
459    
460     * Thu Jan 25 2001 Peter Samuel <peters@e-smith.com>
461     - [1.2.0-01]
462     - Rolled version number to 1.2.0-01. Includes patches upto 1.1.0-23.
463    
464     * Thu Jan 11 2001 Gordon Rowell <gordonr@e-smith.com>
465     - [1.1.0-23]
466     - use serviceControl()
467    
468     * Thu Jan 11 2001 Gordon Rowell <gordonr@e-smith.com>
469     - [1.1.0-22]
470     - reload sshd (and possibly kill it off) in post-restore
471    
472     * Thu Jan 11 2001 Adrian Chung <adrianc@e-smith.com>
473     - [1.1.0-21]
474     - fully qualify path to killall in sshd-reload
475    
476     * Wed Jan 10 2001 Gordon Rowell <gordonr@e-smith.com>
477     - [1.1.0-20]
478     - Kill existing ssh sessions if we have just stopped the service
479    
480     * Wed Jan 10 2001 Gordon Rowell <gordonr@e-smith.com>
481     - [1.1.0-19]
482     - Use sshd reload instead of killall -HUP - that closes current connections
483    
484     * Tue Jan 9 2001 Charlie Brady <charlieb@e-smith.com>
485     - [1.1.0-18]
486     - Make new bootstrap-console-save event - the Lite version
487     - Make sshd-reload shut down sshd if it has been disabled
488     - Don't redo conf-sshd-startup with every console-save
489    
490     * Fri Jan 5 2001 Peter Samuel <peters@e-smith.com>
491     - [1.1.0-17]
492     - Added missing use esmith::util to sshd-reload
493    
494     * Thu Jan 04 2001 Gordon Rowell <gordonr@e-smith.com>
495     - [1.1.0-16]
496     - Added missing use esmith::db
497    
498     * Wed Jan 03 2001 Gordon Rowell <gordonr@e-smith.com>
499     - [1.1.0-15]
500     - sshd-reload now starts sshd if not running and service enabled
501    
502     * Thu Dec 28 2000 Gordon Rowell <gordonr@e-smith.com>
503     - [1.1.0-14]
504     - Process sshd_config template in remoteaccess-update
505    
506     * Thu Dec 28 2000 Gordon Rowell <gordonr@e-smith.com>
507     - [1.1.0-13]
508     - Provide defaults for PermitRootLogin and PasswordAuthentication properties
509    
510     * Thu Dec 21 2000 Charlie Brady <charlieb@e-smith.com>
511     - [1.1.0-12]
512     - Don't restart sshd after config change, just reload config.
513    
514     * Sat Dec 16 2000 Charlie Brady <charlieb@e-smith.com>
515     - [1.1.0-11]
516     - Fix typo
517    
518     * Fri Dec 15 2000 Charlie Brady <charlieb@e-smith.com>
519     - [1.1.0-10]
520     - Move AllowSSH packet filter template fragment here.
521    
522     * Wed Dec 13 2000 Gordon Rowell <gordonr@e-smith.com>
523     - [1.1.0-9]
524     - Disable ssh by default
525    
526     * Wed Dec 13 2000 Gordon Rowell <gordonr@e-smith.com>
527     - [1.1.0-8]
528     - Fixed typo in hosts.allow fragment for private access
529    
530     * Wed Dec 13 2000 Gordon Rowell <gordonr@e-smith.com>
531     - [1.1.0-7]
532     - Added sshd-restart to remoteaccess-update event (and others)
533     - Renamed scripts to sshd-{conf,conf-startup,restart}
534     - Enable private ssh access by default
535    
536     * Tue Dec 12 2000 Adrian Chung <adrianc@e-smith.com>
537     - [1.1.0-6]
538     - fixed location of ssh_host_key in 20HostKey fragment
539    
540     * Wed Dec 06 2000 Peter Samuel <peters@e-smith.com
541     - [1.1.0-5]
542     - Fixed sshd_config templates for PermitRootLogin and
543     PasswordAuthentication
544    
545     * Wed Dec 06 2000 Gordon Rowell <gordonr@e-smith.com>
546     - [1.1.0-4]
547     - conf-ssh-startup: PasswordAuthentication=yes and RootLogin=no
548     - Fixed ordering of Port/Listen fragments
549    
550     * Tue Dec 05 2000 Gordon Rowell <gordonr@e-smith.com>
551     - [1.1.0-3]
552     - Changed sshd_config into a directory template
553     - Used services notation to enable/disable
554     - sshd_config: PasswordAuthentication and RootLogin - both disabled by default
555    
556     * Tue Dec 05 2000 Gordon Rowell <gordonr@e-smith.com>
557     - [1.1.0-1]
558     - Rolled version to 1.1.0. Includes patches up to 0.6-3
559    
560     * Tue Oct 31 2000 Charlie Brady <charlieb@e-smith.com>
561     - Ensure that conf-ssh-startup is run during post-upgrade event.
562     - Fix missing " in hosts.allow template.
563    
564     * Tue Oct 31 2000 Charlie Brady <charlieb@e-smith.com>
565     - Merge services database back into configuration database.
566    
567     * Thu Oct 26 2000 Peter Samuel <peters@e-smith.com>
568     - Rolled version to 0.6. Includes patches up to 0.5-17
569    
570     * Fri Oct 06 2000 Adrian Chung <adrian.chung@e-smith.com>
571     - Fixed a typo in conf-ssh-startup.
572    
573     * Fri Oct 06 2000 Adrian Chung <adrian.chung@e-smith.com>
574     - Move %post code to conf-ssh-startup instead
575     - Default to enabled for sshd in services database if not
576     already set.
577    
578     * Thu Oct 05 2000 Adrian Chung <adrian.chung@e-smith.com>
579     - Change %post to setdefault ... enabled.
580    
581     * Wed Oct 4 2000 Charlie Brady <charlieb@e-smith.com>
582     - Use db_get_type to get service status - to be safe against
583     defined service properties
584     - Do not init services database during post-install event -
585     it is done during %post action.
586    
587     * Wed Oct 4 2000 Charlie Brady <charlieb@e-smith.com>
588     - Only initialise services database during post-install action.
589     - Only expand hosts.allow/sshd if sshd service is enabled.
590    
591     * Wed Oct 4 2000 Charlie Brady <charlieb@e-smith.com>
592     - Fix typo
593    
594     * Tue Oct 3 2000 Charlie Brady <charlieb@e-smith.com>
595     - Update services database when enabling startup
596    
597     * Mon Oct 2 2000 Gordon Rowell <gordonr@e-smith.com>
598     - rewrote spec file to use e-smith-devtools
599    
600     * Mon Sep 25 2000 Paul Nebsit <pkn@e-smith.com>
601     - updated contact and URL info
602    
603     * Thu Sep 14 2000 Gordon Rowell <gordonr@e-smith.com>
604     - Removed obsolete rc7.d symlink from createlinks
605    
606     * Thu Sep 14 2000 Gordon Rowell <gordonr@e-smith.com>
607     - Rebuilt using latest e-smith-devtools - hosts.allow template fragment missing
608    
609     * Tue Aug 30 2000 Paul Nesbit <pkn@e-smith.com>
610     - added 'use e-smith::util' line to conf-ssh-startup
611    
612     * Thu Aug 24 2000 Gordon Rowell <gordonr@e-smith.com>
613     - Rewrote conf-ssh-startup to use serviceControl()
614    
615     * Sun Jul 2 2000 Charlie Brady <charlieb@e-smith.net>
616     - Make S85sshd symlink absolute so that RPM verifies
617    
618     * Sat Jun 17 2000 Charlie Brady <charlieb@e-smith.net>
619     - Rewrite createlinks in perl
620     - Add sshd template for /etc/hosts.allow
621     - Fix ssh-keygen options code
622    
623     * Mon Jun 12 2000 Charlie Brady <charlieb@e-smith.net>
624     - Remove /etc/rc.d/rc7.d symlink before (re-)creating it. Avoids logfile mess.
625     - Change backgroundCommand call to use array instead of string - avoid shell
626     parsing.
627    
628     * Thu May 11 2000 Charlie Brady <charlieb@e-smith.net>
629     - Change rc?.d directory from 3 to 7.
630    
631     %description
632     e-smith server enhancement to configure and enable openssh
633    
634     %prep
635     %setup
636 jpp 1.2 %patch0 -p1
637 jpp 1.3 %patch1 -p1
638 jpp 1.4 %patch2 -p1
639 jpp 1.5 %patch3 -p1
640     rm -rf root/var/service root/service
641 jpp 1.7 %patch4 -p1
642 stephdl 1.1
643     %build
644     perl createlinks
645     # build the test suite from embedded tests
646     /sbin/e-smith/buildtests e-smith-openssh
647    
648     %install
649     rm -rf $RPM_BUILD_ROOT
650     ( cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT )
651     rm -f %{name}-%{version}-%{release}-filelist
652    
653     /sbin/e-smith/genfilelist \
654 jpp 1.5 --file '/sbin/e-smith/systemd/sshd-prepare' 'attr(0554,root,root)' \
655 stephdl 1.1 --dir '/var/log/sshd' 'attr(2750,root,nofiles)' \
656     --dir '/var/empty/sshd' 'attr(0711,root,root)' \
657     $RPM_BUILD_ROOT \
658     > %{name}-%{version}-%{release}-filelist
659    
660     echo "%doc COPYING" >> %{name}-%{version}-%{release}-filelist
661    
662     %clean
663     rm -rf $RPM_BUILD_ROOT
664    
665     %files -f %{name}-%{version}-%{release}-filelist
666     %defattr(-,root,root)
667 jpp 1.6
668     %pre
669     if [ $1 -gt 1 ] ; then
670     if [ -e /var/service/sshd/run ] ; then
671     /usr/bin/sv d sshd
672     /usr/bin/sv d sshd/log
673     fi
674     fi

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed