1 |
# $Id: e-smith-openssh.spec,v 1.2 2008/10/07 18:49:47 slords Exp $ |
2 |
|
3 |
Summary: e-smith module to configure and enable ssh |
4 |
%define name e-smith-openssh |
5 |
Name: %{name} |
6 |
%define version 2.2.0 |
7 |
%define release 2 |
8 |
Version: %{version} |
9 |
Release: %{release}%{?dist} |
10 |
License: GPL |
11 |
Group: Networking/Daemons |
12 |
Source: %{name}-%{version}.tar.gz |
13 |
Patch0: e-smith-openssh-2.2.0-LoginGraceTime.patch |
14 |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
15 |
BuildRequires: e-smith-devtools |
16 |
BuildArchitectures: noarch |
17 |
Requires: e-smith, openssl, |
18 |
Requires: openssh >= 3.5 |
19 |
Requires: openssh-clients |
20 |
Requires: openssh-server |
21 |
Requires: e-smith-lib >= 1.15.1-19 |
22 |
Requires: runit |
23 |
AutoReqProv: no |
24 |
|
25 |
%changelog |
26 |
* Sun Dec 28 2008 Jonathan Martens <smesevrer-contribs@snetram.nl> 2.2.0-2.sme |
27 |
- Template sshd login grace time, kept default at 600s [SME: 4903] |
28 |
|
29 |
* Tue Oct 7 2008 Shad L. Lords <slords@mail.com> 2.2.0-1.sme |
30 |
- Roll new stream to separate sme7/sme8 trees [SME: 4633] |
31 |
|
32 |
* Wed Jan 09 2008 Stephen Noble <support@dungog.net> 1.12.0-13 |
33 |
- Remove template fragments for /root/.ssh/config [SME: 513] |
34 |
|
35 |
* Tue Dec 18 2007 Shad L. Lords <slords@mail.com> 1.12.0-12 |
36 |
- Actually apply previous patch [SME: 3678] |
37 |
|
38 |
* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.12.0-11 |
39 |
- Allow root to be key based login only [SME: 3678] |
40 |
|
41 |
* Tue Oct 23 2007 Charlie Brady <charlie_brady@mitel.com> 1.12.0-10 |
42 |
- Prevent rkhunter false positive if ssh is disabled but |
43 |
PermitRootLogin is enabled in config. [SME: 166] |
44 |
|
45 |
* Sun Apr 29 2007 Shad L. Lords <slords@mail.com> |
46 |
- Clean up spec so package can be built by koji/plague |
47 |
|
48 |
* Sun Apr 08 2007 Shad L. Lords <slords@mail.com> 1.12.0-9 |
49 |
- Adjust permissions on empty/sshd directory again [SME: 2711] |
50 |
|
51 |
* Fri Apr 06 2007 Shad L. Lords <slords@mail.com> 1.12.0-8 |
52 |
- Adjust permissions on empty/sshd directory [SME: 2711] |
53 |
|
54 |
* Tue Mar 06 2007 Shad L. Lords <slords@mail.com> 1.12.0-7 |
55 |
- Adjust sftp-server path in sshd_config to match openssh-servers [SME: 2470] |
56 |
|
57 |
* Thu Dec 07 2006 Shad L. Lords <slords@mail.com> |
58 |
- Update to new release naming. No functional changes. |
59 |
- Make Packager generic |
60 |
|
61 |
* Tue Jul 25 2006 Gordon Rowell <gordonr@gormand.com.au> 1.12.0-05 |
62 |
- Use sshd{TCPPort} for listen Port - thanks MasterSleepy [SME: 1774] |
63 |
|
64 |
* Tue Jul 18 2006 Charlie Brady <charlie_brady@mitel.com> 1.12.0-04 |
65 |
- Allow "UsePAM" setting to be controlled from db. [SME: 1744] |
66 |
|
67 |
* Wed Apr 5 2006 Gordon Rowell <gordonr@gormand.com.au> 1.12.0-03 |
68 |
- Add newline after user entries in rssh.conf [SME: 877] |
69 |
|
70 |
* Wed Mar 29 2006 Gordon Rowell <gordonr@gormand.com.au> 1.12.0-02 |
71 |
- Don't display /etc/motd contents from ssh [SME: 718] |
72 |
|
73 |
* Tue Mar 14 2006 Charlie Brady <charlie_brady@mitel.com> 1.12.0-01 |
74 |
- Roll stable stream version. [SME: 1016] |
75 |
|
76 |
* Mon Mar 13 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-29 |
77 |
- Expand /etc/rssh.conf in user-{create,delete,lock,modify} [SME: 877] |
78 |
|
79 |
* Mon Mar 13 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-28 |
80 |
- A user is allowed access to rssh protocols if: |
81 |
- They have PasswordSet==yes |
82 |
- They have AllowRSSH==yes or |
83 |
VPNClientAccess==yes but not AllowRSSH==no [SME: 877] |
84 |
|
85 |
* Mon Mar 13 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-27 |
86 |
- Remove defaults for sshd{Allow*} and the templates for rssh.conf [SME: 877] |
87 |
- Allow a user all of the rssh protocols if AllowSSH is yes [SME: 877] |
88 |
|
89 |
* Thu Mar 02 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-26 |
90 |
- Adjust sftp-server path in sshd_config to match rssh [SME: 924] |
91 |
|
92 |
* Wed Mar 01 2006 Charlie Brady <charlie_brady@mitel.com> 1.11.0-25 |
93 |
- Add syslog socket inside privsep chroot jail [SME: 916] |
94 |
|
95 |
* Tue Jan 24 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-24 |
96 |
- Default sshd{AllowRSYNC} == yes [SME: 42] |
97 |
|
98 |
* Mon Jan 23 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-23 |
99 |
- Add template for /etc/rssh.conf [SME: 42] |
100 |
- Default sshd{AllowSCP, AllowSFTP} == yes [SME: 532] |
101 |
- Default sshd{AllowRDIST,AllowRSYNC,AllowCVS} == no |
102 |
|
103 |
* Fri Jan 6 2006 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-22 |
104 |
- Default sshd{PasswordAuthentication} to "no" [SME: 377] |
105 |
|
106 |
* Wed Nov 30 2005 Gordon Rowell <gordonr@gormand.com.au> 1.11.0-21 |
107 |
- Bump release number only |
108 |
|
109 |
* Wed Aug 10 2005 Charlie Brady <charlieb@e-smith.com> |
110 |
- [1.11.0-20] |
111 |
- Delete test related requires (not really required) and add runit. |
112 |
|
113 |
* Wed Jul 20 2005 Charlie Brady <charlieb@e-smith.com> |
114 |
- [1.11.0-19] |
115 |
- Set $sshd{TCPPort} and remove obsolete masq template fragment. [SF: 1241409] |
116 |
|
117 |
* Tue Jul 19 2005 Charlie Brady <charlieb@e-smith.com> |
118 |
- [1.11.0-18] |
119 |
- Update to current db access APIs. [SF: 1216546] |
120 |
|
121 |
* Tue Jul 5 2005 Charlie Brady <charlieb@e-smith.com> |
122 |
- [1.11.0-17] |
123 |
- Configure MaxAuthTries (our default is 2). [SF: 1232544] |
124 |
|
125 |
* Thu Jun 16 2005 Charlie Brady <charlieb@e-smith.com> |
126 |
- [1.11.0-16] |
127 |
- Ensure that 'status' property is recognised at startup. [MN00061795] |
128 |
|
129 |
* Tue May 17 2005 Charlie Brady <charlieb@e-smith.com> |
130 |
- [1.11.0-15] |
131 |
- Default to protocol 2 only on new installs, and '2,1' for |
132 |
upgrades where $sshd{Protocol} is not defined. |
133 |
|
134 |
* Mon Mar 14 2005 Charlie Brady <charlieb@e-smith.com> |
135 |
- [1.11.0-14] |
136 |
- Use generic_template_expand action for all template expansions from |
137 |
sshd-conf. Update e-smith-lib dependency. [MN00064130] |
138 |
- Replace sshd-reload with call to 'adjust-services'. [MN00065576] |
139 |
|
140 |
* Tue Sep 28 2004 Michael Soulier <msoulier@e-smith.com> |
141 |
- [1.11.0-13] |
142 |
- Updated requires with new perl dependencies. [charlieb MN00040240] |
143 |
- Clean BuildRequires. [charlieb MN00043055] |
144 |
|
145 |
* Mon Dec 22 2003 Michael Soulier <msoulier@e-smith.com> |
146 |
- [1.11.0-12] |
147 |
- Added host key generation code to run script. [msoulier 9549] |
148 |
|
149 |
* Wed Dec 10 2003 Michael Soulier <msoulier@e-smith.com> |
150 |
- [1.11.0-11] |
151 |
- Fixed a bug in the genfilelist options. [msoulier 9549] |
152 |
|
153 |
* Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com> |
154 |
- [1.11.0-10] |
155 |
- Put full path to sshd in run script to work around assumption of full path |
156 |
in sshd sighup handler. [msoulier 9549] |
157 |
|
158 |
* Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com> |
159 |
- [1.11.0-09] |
160 |
- Updated sshd-reload to use daemontools wrapper. [msoulier 9549] |
161 |
|
162 |
* Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com> |
163 |
- [1.11.0-08] |
164 |
- Moved the shebang line to a place where it actually matters. Tell me it's |
165 |
friday. [msoulier 9549] |
166 |
|
167 |
* Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com> |
168 |
- [1.11.0-07] |
169 |
- Fixed a couple of typos preventing multilog from starting. [msoulier 9549] |
170 |
|
171 |
* Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com> |
172 |
- [1.11.0-06] |
173 |
- Moved initscript to /etc/init.d/supervise/sshd. [msoulier 9549] |
174 |
|
175 |
* Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com> |
176 |
- [1.11.0-05] |
177 |
- Fixed a couple of specfile typos. [msoulier 9549] |
178 |
|
179 |
* Fri Dec 5 2003 Michael Soulier <msoulier@e-smith.com> |
180 |
- [1.11.0-04] |
181 |
- Adding supervision of sshd. [msoulier 9549] |
182 |
- Updated createlinks to latest api. |
183 |
|
184 |
* Tue Sep 16 2003 Charlie Brady <charlieb@e-smith.com> |
185 |
- [1.11.0-03] |
186 |
- Remove deprecated RhostsAuthentication from sshd_config. [charlieb 10014] |
187 |
|
188 |
* Thu Aug 21 2003 Charlie Brady <charlieb@e-smith.com> |
189 |
- [1.11.0-02] |
190 |
- Replace sshd-conf-startup action with default db fragments. |
191 |
[charlieb 9553] |
192 |
|
193 |
* Thu Aug 21 2003 Charlie Brady <charlieb@e-smith.com> |
194 |
- [1.11.0-01] |
195 |
- Changing version to development stream number - 1.11.0 |
196 |
|
197 |
* Thu Jun 26 2003 Charlie Brady <charlieb@e-smith.com> |
198 |
- [1.10.0-01] |
199 |
- Changing version to stable stream number - 1.10.0 |
200 |
|
201 |
* Mon Apr 21 2003 Mark Knox <markk@e-smith.com> |
202 |
- [1.9.0-10] |
203 |
- Enforce 0600 on sshd_config [markk 8407] |
204 |
|
205 |
* Tue Apr 15 2003 Gordon Rowell <gordonr@e-smith.com> |
206 |
- [1.9.0-09] |
207 |
- Add Compression and UsePrivilegeSeparation options [gordonr 8173] |
208 |
|
209 |
* Tue Apr 8 2003 Michael Soulier <msoulier@e-smith.com> |
210 |
- [1.9.0-08] |
211 |
- Backed-out 1.9.0-07. [msoulier 5782] |
212 |
|
213 |
* Tue Apr 8 2003 Michael Soulier <msoulier@e-smith.com> |
214 |
- [1.9.0-07] |
215 |
- Shut off tcp forwarding in the daemon. [msoulier 5782] |
216 |
|
217 |
* Tue Apr 1 2003 Gordon Rowell <gordonr@e-smith.com> |
218 |
- [1.9.0-06] |
219 |
- Actually reload ssh rather than restarting in sshd-reload [gordonr 7785] |
220 |
|
221 |
* Tue Mar 18 2003 Lijie Deng <lijied@e-smith.com> |
222 |
- [1.9.0-05] |
223 |
- Deleted ./root/.ssh/config/template-begin [lijied 3295] |
224 |
|
225 |
* Mon Mar 17 2003 Lijie Deng <lijied@e-smith.com> |
226 |
- [1.9.0-04] |
227 |
- Deleted template-begin/end file [lijied 3295] |
228 |
|
229 |
* Tue Mar 4 2003 Charlie Brady <charlieb@e-smith.com> |
230 |
- [1.9.0-03] |
231 |
- s/HostsAllowSpec/hosts_allow_spec/ [charlieb 5650] |
232 |
|
233 |
* Fri Feb 28 2003 Charlie Brady <charlieb@e-smith.com> |
234 |
- [1.9.0-02] |
235 |
- Re-do hosts.allow template to use esmith::ConfigDB::HostsAllowSpec. |
236 |
Add dependency on up-to-date e-smith-lib. [charlieb 5650] |
237 |
|
238 |
* Fri Feb 28 2003 Charlie Brady <charlieb@e-smith.com> |
239 |
- [1.9.0-01] |
240 |
- Roll development stream to 1.9.0 |
241 |
|
242 |
* Mon Feb 24 2003 Charlie Brady <charlieb@e-smith.com> |
243 |
- [1.8.0-02] |
244 |
- Allow MaxStartups to be tunable from the config DB [charlieb 7362] |
245 |
|
246 |
* Fri Oct 11 2002 Charlie Brady <charlieb@e-smith.com> |
247 |
- [1.8.0-01] |
248 |
- Rolling stable version number to 1.8.0 |
249 |
|
250 |
* Wed Oct 2 2002 Mark Knox <markk@e-smith.com> |
251 |
- [1.7.3-04] |
252 |
- Remove stray braces in hosts.allow template [markk 3786] |
253 |
|
254 |
* Mon Sep 23 2002 Charlie Brady <charlieb@e-smith.com> |
255 |
- [1.7.3-03] |
256 |
- Fix hosts.allow template problem introduced by last change [charlieb 3786] |
257 |
|
258 |
* Tue Sep 10 2002 Mark Knox <markk@e-smith.com> |
259 |
- [1.7.3-02] |
260 |
- Remove deprecated split on pipe [markk 3786] |
261 |
|
262 |
* Tue Aug 20 2002 Charlie Brady <charlieb@e-smith.com> |
263 |
- [1.7.3-01] |
264 |
- Add rc7.d symlink and don't set deprecated InitscriptsOrder property |
265 |
[charlieb 4458] |
266 |
- Change use of allow_tcp_in() function to allow dynamic reconfig. |
267 |
[charlieb 4501] |
268 |
|
269 |
* Thu Aug 8 2002 Charlie Brady <charlieb@e-smith.com> |
270 |
- [1.7.2-01] |
271 |
- Change masq script fragment to use allow_tcp_in() function. [charlieb 4499] |
272 |
|
273 |
* Wed Jul 17 2002 Charlie Brady <charlieb@e-smith.com> |
274 |
- [1.7.1-01] |
275 |
- Change masq script fragment to use iptables. [charlieb 1268] |
276 |
|
277 |
* Wed Jun 5 2002 Charlie Brady <charlieb@e-smith.com> |
278 |
- [1.7.0-01] |
279 |
- Changing version to maintained stream number to 1.7.0 |
280 |
|
281 |
* Fri May 31 2002 Charlie Brady <charlieb@e-smith.com> |
282 |
- [1.6.0-01] |
283 |
- Changing version to maintained stream number to 1.6.0 |
284 |
|
285 |
* Thu May 23 2002 Gordon Rowell <gordonr@e-smith.com> |
286 |
- [1.5.6-01] |
287 |
- RPM rebuild forced by cvsroot2rpm |
288 |
|
289 |
* Mon May 13 2002 Kirrily Robert <skud@e-smith.com> |
290 |
- [1.5.5-01] |
291 |
- Added buildtests [skud 2932] |
292 |
|
293 |
* Fri Apr 26 2002 Tony Clayton <apc@e-smith.com> |
294 |
- [1.5.4-01] |
295 |
- add -t option to ssh-keygen call in sshd-conf [tonyc] |
296 |
|
297 |
* Fri Mar 6 2002 Michael G Schwern <schwern@e-smith.com> |
298 |
- [1.5.3-01] |
299 |
- Tested & documented sshd-reload action [schwern 2932] |
300 |
- Tested & documented sshd-conf and sshd-conf-startup actions [schwern 2932] |
301 |
- Changed all actions to use esmith::ConfigDB [schwern 2932] |
302 |
- Fixed dependencies. [schwern] |
303 |
|
304 |
* Thu Feb 14 2002 Kirrily Robert <skud@e-smith.com> |
305 |
- [1.5.2-01] |
306 |
- CVS testing |
307 |
|
308 |
* Thu Feb 14 2002 Kirrily Robert <skud@e-smith.com> |
309 |
- [1.5.0-01] |
310 |
- rollRPM: Rolled version number to 1.5.0-01. Includes patches up to 1.4.0-06. |
311 |
|
312 |
* Mon Nov 05 2001 Charlie Brady <charlieb@e-smith.com> |
313 |
- [1.4.0-06] |
314 |
- Remove obsoleted "CheckMail no" fragment from sshd_config template. |
315 |
|
316 |
* Tue Aug 28 2001 Gordon Rowell <gordonr@e-smith.com> |
317 |
- [1.4.0-05] |
318 |
- Removed links from deprecated post-restore event |
319 |
|
320 |
* Fri Aug 17 2001 gordonr |
321 |
- [1.4.0-04] |
322 |
- Autorebuild by rebuildRPM |
323 |
|
324 |
* Tue Aug 14 2001 Charlie Brady <charlieb@e-smith.com> |
325 |
- [1.4.0-03] |
326 |
- Change back to Protocol 1 until known_hosts2 and authorized_keys2 files are |
327 |
implemented on both sides. |
328 |
|
329 |
* Tue Aug 14 2001 Charlie Brady <charlieb@e-smith.com> |
330 |
- [1.4.0-02] |
331 |
- Add template fragements to generate /root/.ssh/config host |
332 |
config sections for any hostnames added to %e_smith_hosts by |
333 |
other fragements numbered between 00 and 19. |
334 |
- Delete useless template-end for /root/.ssh/config. |
335 |
|
336 |
* Wed Aug 8 2001 Charlie Brady <charlieb@e-smith.com> |
337 |
- [1.4.0-01] |
338 |
- Rolled version number to 1.4.0-01. Includes patches upto 1.3.0-10. |
339 |
|
340 |
* Wed Aug 8 2001 Gordon Rowell <gordonr@e-smith.com> |
341 |
- [1.3.0-10] |
342 |
- Use restart instead of reload as some initscripts don't have the latter |
343 |
|
344 |
* Sun Jul 8 2001 Gordon Rowell <gordonr@e-smith.com> |
345 |
- [1.3.0-09] |
346 |
- Check "access" property of sshd service |
347 |
|
348 |
* Fri Jul 6 2001 Peter Samuel <peters@e-smith.com> |
349 |
- [1.3.0-08] |
350 |
- Changed license to GPL |
351 |
|
352 |
* Thu Jul 05 2001 Gordon Rowell <gordonr@e-smith.com> |
353 |
- [1.3.0-07] |
354 |
- Explicitly disable ChallengeResponseAuthentication and |
355 |
KbdInteractiveAuthentication |
356 |
|
357 |
* Wed May 30 2001 Gordon Rowell <gordonr@e-smith.com> |
358 |
- [1.3.0-06] |
359 |
- Added HostKey line for /etc/ssh/ssh_host_rsa_key for SSH version 2 |
360 |
|
361 |
* Tue May 29 2001 Tony Clayton <tonyc@e-smith.com> |
362 |
- [1.3.0-05] |
363 |
- fixed actions that had tied %conf when calling serviceControl (2 actions) |
364 |
|
365 |
* Mon May 21 2001 Gordon Rowell <gordonr@e-smith.com> |
366 |
- [1.3.0-04] |
367 |
- Added links to /usr/libexec and /usr/local/libexec to enable |
368 |
sftp for more client systems under protocol V1 |
369 |
|
370 |
* Mon May 21 2001 Gordon Rowell <gordonr@e-smith.com> |
371 |
- [1.3.0-03] |
372 |
- Revised after comments from Charlie |
373 |
- Added documentation for MaxStartups and cleaner perl idiom for |
374 |
SubsystemSftp test |
375 |
|
376 |
* Mon May 21 2001 Gordon Rowell <gordonr@e-smith.com> |
377 |
- [1.3.0-02] |
378 |
- Enabled sftp subsystem by default with correct path to sftp-server |
379 |
- Added MaxStartups configuration |
380 |
|
381 |
* Mon May 21 2001 Gordon Rowell <gordonr@e-smith.com> |
382 |
- [1.3.0-01] |
383 |
- Rolled version number to 1.3.0-01. Includes patches upto 1.2.0-06. |
384 |
|
385 |
* Wed May 09 2001 Tony Clayton <tonyc@e-smith.com> |
386 |
- [1.2.0-06] |
387 |
- Forgot to add last patch to %setup. Adding it now. |
388 |
|
389 |
* Wed May 09 2001 Tony Clayton <tonyc@e-smith.com> |
390 |
- [1.2.0-05] |
391 |
- Add /root/.ssh/config template-{begin,end} fragments |
392 |
- Expand config template from sshd-conf |
393 |
|
394 |
* Thu Apr 27 2001 Gordon Rowell <gordonr@e-smith.com> |
395 |
- [1.2.0-04] |
396 |
- Rolled version for GPG signing - no change |
397 |
|
398 |
* Mon Apr 9 2001 Gordon Rowell <gordonr@e-smith.com> |
399 |
- [1.2.0-03] |
400 |
- Extra HostKey line for openssh-2.5 |
401 |
|
402 |
* Thu Feb 8 2001 Adrian Chung <adrianc@e-smith.com> |
403 |
- [1.2.0-02] |
404 |
- Rolling release number for GPG signing. |
405 |
|
406 |
* Thu Jan 25 2001 Peter Samuel <peters@e-smith.com> |
407 |
- [1.2.0-01] |
408 |
- Rolled version number to 1.2.0-01. Includes patches upto 1.1.0-23. |
409 |
|
410 |
* Thu Jan 11 2001 Gordon Rowell <gordonr@e-smith.com> |
411 |
- [1.1.0-23] |
412 |
- use serviceControl() |
413 |
|
414 |
* Thu Jan 11 2001 Gordon Rowell <gordonr@e-smith.com> |
415 |
- [1.1.0-22] |
416 |
- reload sshd (and possibly kill it off) in post-restore |
417 |
|
418 |
* Thu Jan 11 2001 Adrian Chung <adrianc@e-smith.com> |
419 |
- [1.1.0-21] |
420 |
- fully qualify path to killall in sshd-reload |
421 |
|
422 |
* Wed Jan 10 2001 Gordon Rowell <gordonr@e-smith.com> |
423 |
- [1.1.0-20] |
424 |
- Kill existing ssh sessions if we have just stopped the service |
425 |
|
426 |
* Wed Jan 10 2001 Gordon Rowell <gordonr@e-smith.com> |
427 |
- [1.1.0-19] |
428 |
- Use sshd reload instead of killall -HUP - that closes current connections |
429 |
|
430 |
* Tue Jan 9 2001 Charlie Brady <charlieb@e-smith.com> |
431 |
- [1.1.0-18] |
432 |
- Make new bootstrap-console-save event - the Lite version |
433 |
- Make sshd-reload shut down sshd if it has been disabled |
434 |
- Don't redo conf-sshd-startup with every console-save |
435 |
|
436 |
* Fri Jan 5 2001 Peter Samuel <peters@e-smith.com> |
437 |
- [1.1.0-17] |
438 |
- Added missing use esmith::util to sshd-reload |
439 |
|
440 |
* Thu Jan 04 2001 Gordon Rowell <gordonr@e-smith.com> |
441 |
- [1.1.0-16] |
442 |
- Added missing use esmith::db |
443 |
|
444 |
* Wed Jan 03 2001 Gordon Rowell <gordonr@e-smith.com> |
445 |
- [1.1.0-15] |
446 |
- sshd-reload now starts sshd if not running and service enabled |
447 |
|
448 |
* Thu Dec 28 2000 Gordon Rowell <gordonr@e-smith.com> |
449 |
- [1.1.0-14] |
450 |
- Process sshd_config template in remoteaccess-update |
451 |
|
452 |
* Thu Dec 28 2000 Gordon Rowell <gordonr@e-smith.com> |
453 |
- [1.1.0-13] |
454 |
- Provide defaults for PermitRootLogin and PasswordAuthentication properties |
455 |
|
456 |
* Thu Dec 21 2000 Charlie Brady <charlieb@e-smith.com> |
457 |
- [1.1.0-12] |
458 |
- Don't restart sshd after config change, just reload config. |
459 |
|
460 |
* Sat Dec 16 2000 Charlie Brady <charlieb@e-smith.com> |
461 |
- [1.1.0-11] |
462 |
- Fix typo |
463 |
|
464 |
* Fri Dec 15 2000 Charlie Brady <charlieb@e-smith.com> |
465 |
- [1.1.0-10] |
466 |
- Move AllowSSH packet filter template fragment here. |
467 |
|
468 |
* Wed Dec 13 2000 Gordon Rowell <gordonr@e-smith.com> |
469 |
- [1.1.0-9] |
470 |
- Disable ssh by default |
471 |
|
472 |
* Wed Dec 13 2000 Gordon Rowell <gordonr@e-smith.com> |
473 |
- [1.1.0-8] |
474 |
- Fixed typo in hosts.allow fragment for private access |
475 |
|
476 |
* Wed Dec 13 2000 Gordon Rowell <gordonr@e-smith.com> |
477 |
- [1.1.0-7] |
478 |
- Added sshd-restart to remoteaccess-update event (and others) |
479 |
- Renamed scripts to sshd-{conf,conf-startup,restart} |
480 |
- Enable private ssh access by default |
481 |
|
482 |
* Tue Dec 12 2000 Adrian Chung <adrianc@e-smith.com> |
483 |
- [1.1.0-6] |
484 |
- fixed location of ssh_host_key in 20HostKey fragment |
485 |
|
486 |
* Wed Dec 06 2000 Peter Samuel <peters@e-smith.com |
487 |
- [1.1.0-5] |
488 |
- Fixed sshd_config templates for PermitRootLogin and |
489 |
PasswordAuthentication |
490 |
|
491 |
* Wed Dec 06 2000 Gordon Rowell <gordonr@e-smith.com> |
492 |
- [1.1.0-4] |
493 |
- conf-ssh-startup: PasswordAuthentication=yes and RootLogin=no |
494 |
- Fixed ordering of Port/Listen fragments |
495 |
|
496 |
* Tue Dec 05 2000 Gordon Rowell <gordonr@e-smith.com> |
497 |
- [1.1.0-3] |
498 |
- Changed sshd_config into a directory template |
499 |
- Used services notation to enable/disable |
500 |
- sshd_config: PasswordAuthentication and RootLogin - both disabled by default |
501 |
|
502 |
* Tue Dec 05 2000 Gordon Rowell <gordonr@e-smith.com> |
503 |
- [1.1.0-1] |
504 |
- Rolled version to 1.1.0. Includes patches up to 0.6-3 |
505 |
|
506 |
* Tue Oct 31 2000 Charlie Brady <charlieb@e-smith.com> |
507 |
- Ensure that conf-ssh-startup is run during post-upgrade event. |
508 |
- Fix missing " in hosts.allow template. |
509 |
|
510 |
* Tue Oct 31 2000 Charlie Brady <charlieb@e-smith.com> |
511 |
- Merge services database back into configuration database. |
512 |
|
513 |
* Thu Oct 26 2000 Peter Samuel <peters@e-smith.com> |
514 |
- Rolled version to 0.6. Includes patches up to 0.5-17 |
515 |
|
516 |
* Fri Oct 06 2000 Adrian Chung <adrian.chung@e-smith.com> |
517 |
- Fixed a typo in conf-ssh-startup. |
518 |
|
519 |
* Fri Oct 06 2000 Adrian Chung <adrian.chung@e-smith.com> |
520 |
- Move %post code to conf-ssh-startup instead |
521 |
- Default to enabled for sshd in services database if not |
522 |
already set. |
523 |
|
524 |
* Thu Oct 05 2000 Adrian Chung <adrian.chung@e-smith.com> |
525 |
- Change %post to setdefault ... enabled. |
526 |
|
527 |
* Wed Oct 4 2000 Charlie Brady <charlieb@e-smith.com> |
528 |
- Use db_get_type to get service status - to be safe against |
529 |
defined service properties |
530 |
- Do not init services database during post-install event - |
531 |
it is done during %post action. |
532 |
|
533 |
* Wed Oct 4 2000 Charlie Brady <charlieb@e-smith.com> |
534 |
- Only initialise services database during post-install action. |
535 |
- Only expand hosts.allow/sshd if sshd service is enabled. |
536 |
|
537 |
* Wed Oct 4 2000 Charlie Brady <charlieb@e-smith.com> |
538 |
- Fix typo |
539 |
|
540 |
* Tue Oct 3 2000 Charlie Brady <charlieb@e-smith.com> |
541 |
- Update services database when enabling startup |
542 |
|
543 |
* Mon Oct 2 2000 Gordon Rowell <gordonr@e-smith.com> |
544 |
- rewrote spec file to use e-smith-devtools |
545 |
|
546 |
* Mon Sep 25 2000 Paul Nebsit <pkn@e-smith.com> |
547 |
- updated contact and URL info |
548 |
|
549 |
* Thu Sep 14 2000 Gordon Rowell <gordonr@e-smith.com> |
550 |
- Removed obsolete rc7.d symlink from createlinks |
551 |
|
552 |
* Thu Sep 14 2000 Gordon Rowell <gordonr@e-smith.com> |
553 |
- Rebuilt using latest e-smith-devtools - hosts.allow template fragment missing |
554 |
|
555 |
* Tue Aug 30 2000 Paul Nesbit <pkn@e-smith.com> |
556 |
- added 'use e-smith::util' line to conf-ssh-startup |
557 |
|
558 |
* Thu Aug 24 2000 Gordon Rowell <gordonr@e-smith.com> |
559 |
- Rewrote conf-ssh-startup to use serviceControl() |
560 |
|
561 |
* Sun Jul 2 2000 Charlie Brady <charlieb@e-smith.net> |
562 |
- Make S85sshd symlink absolute so that RPM verifies |
563 |
|
564 |
* Sat Jun 17 2000 Charlie Brady <charlieb@e-smith.net> |
565 |
- Rewrite createlinks in perl |
566 |
- Add sshd template for /etc/hosts.allow |
567 |
- Fix ssh-keygen options code |
568 |
|
569 |
* Mon Jun 12 2000 Charlie Brady <charlieb@e-smith.net> |
570 |
- Remove /etc/rc.d/rc7.d symlink before (re-)creating it. Avoids logfile mess. |
571 |
- Change backgroundCommand call to use array instead of string - avoid shell |
572 |
parsing. |
573 |
|
574 |
* Thu May 11 2000 Charlie Brady <charlieb@e-smith.net> |
575 |
- Change rc?.d directory from 3 to 7. |
576 |
|
577 |
%description |
578 |
e-smith server enhancement to configure and enable openssh |
579 |
|
580 |
%prep |
581 |
%setup |
582 |
%patch0 -p1 |
583 |
|
584 |
%build |
585 |
for i in console-save \ |
586 |
post-install \ |
587 |
post-upgrade \ |
588 |
remoteaccess-update \ |
589 |
bootstrap-console-save |
590 |
do |
591 |
mkdir -p root/etc/e-smith/events/$i |
592 |
done |
593 |
perl createlinks |
594 |
# build the test suite from embedded tests |
595 |
/sbin/e-smith/buildtests e-smith-openssh |
596 |
|
597 |
# Manage supervise and multilog. |
598 |
mkdir -p root/service |
599 |
ln -s ../var/service/sshd root/service/sshd |
600 |
mkdir -p root/var/service/sshd/supervise |
601 |
touch root/var/service/sshd/down |
602 |
mkdir -p root/var/service/sshd/log/supervise |
603 |
mkdir -p root/var/log/sshd |
604 |
|
605 |
%install |
606 |
rm -rf $RPM_BUILD_ROOT |
607 |
( cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT ) |
608 |
rm -f %{name}-%{version}-%{release}-filelist |
609 |
|
610 |
/sbin/e-smith/genfilelist \ |
611 |
--dir '/var/service/sshd' 'attr(1755,root,root)' \ |
612 |
--file '/var/service/sshd/down' 'attr(0644,root,root)' \ |
613 |
--file '/var/service/sshd/run' 'attr(0755,root,root)' \ |
614 |
--dir '/var/service/sshd/supervise' 'attr(0700,root,root)' \ |
615 |
--dir '/var/service/sshd/log' 'attr(1755,root,root)' \ |
616 |
--dir '/var/service/sshd/log/supervise' 'attr(0700,root,root)' \ |
617 |
--file '/var/service/sshd/log/run' 'attr(0755,root,root)' \ |
618 |
--dir '/var/log/sshd' 'attr(2750,root,nofiles)' \ |
619 |
--dir '/var/empty/sshd' 'attr(0711,root,root)' \ |
620 |
$RPM_BUILD_ROOT \ |
621 |
> %{name}-%{version}-%{release}-filelist |
622 |
|
623 |
echo "%doc COPYING" >> %{name}-%{version}-%{release}-filelist |
624 |
|
625 |
%clean |
626 |
rm -rf $RPM_BUILD_ROOT |
627 |
|
628 |
%files -f %{name}-%{version}-%{release}-filelist |
629 |
%defattr(-,root,root) |