1 |
Name: rssh |
2 |
Version: 2.3.4 |
3 |
Release: 2%{?dist} |
4 |
Summary: Restricted shell for use with OpenSSH, allowing only scp and/or sftp |
5 |
Group: Applications/Internet |
6 |
License: BSD |
7 |
URL: http://www.pizzashack.org/rssh/ |
8 |
Source0: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.gz |
9 |
Source1: http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.gz.sig |
10 |
Patch0: rssh-2.3.4-makefile.patch |
11 |
Patch1: rssh-2.3.4-rsync-protocol.patch |
12 |
Patch2: rssh-2.3.4-command-line-error.patch |
13 |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
14 |
|
15 |
BuildRequires: openssh-server, openssh-clients |
16 |
BuildRequires: cvs rsync rdist |
17 |
Requires: openssh-server |
18 |
Requires(pre): shadow-utils |
19 |
|
20 |
%description |
21 |
rssh is a restricted shell for use with OpenSSH, allowing only scp |
22 |
and/or sftp. For example, if you have a server which you only want |
23 |
to allow users to copy files off of via scp, without providing shell |
24 |
access, you can use rssh to do that. It is a alternative to scponly. |
25 |
|
26 |
|
27 |
%prep |
28 |
%setup -q |
29 |
%patch0 -p1 -b .makefile |
30 |
%patch1 -p1 -b .rsync3 |
31 |
%patch2 -p1 -b .cmdline-error |
32 |
|
33 |
chmod 644 conf_convert.sh |
34 |
chmod 644 mkchroot.sh |
35 |
|
36 |
|
37 |
%build |
38 |
%configure |
39 |
make %{?_smp_mflags} |
40 |
|
41 |
|
42 |
%install |
43 |
rm -rf %{buildroot} |
44 |
make install INSTALL="%{__install} -p" DESTDIR=%{buildroot} |
45 |
# since rssh 2.3.4, default config is installed as rssh.conf.default, |
46 |
# rename it for packaging in rpm |
47 |
mv %{buildroot}/%{_sysconfdir}/rssh.conf{.default,} |
48 |
|
49 |
%clean |
50 |
rm -rf %{buildroot} |
51 |
|
52 |
%pre |
53 |
getent group rsshusers >/dev/null || groupadd -r rsshusers |
54 |
exit 0 |
55 |
|
56 |
|
57 |
%files |
58 |
%defattr(-, root, root, -) |
59 |
%doc AUTHORS ChangeLog CHROOT COPYING NEWS README SECURITY TODO |
60 |
%doc conf_convert.sh mkchroot.sh |
61 |
%doc %{_mandir}/man1/rssh.1* |
62 |
%doc %{_mandir}/man5/rssh.conf.5* |
63 |
%config(noreplace) %{_sysconfdir}/rssh.conf |
64 |
%attr(750, root, rsshusers) %{_bindir}/rssh |
65 |
%attr(4750, root, rsshusers) %{_libexecdir}/rssh_chroot_helper |
66 |
|
67 |
|
68 |
%changelog |
69 |
* Fri Mar 18 2016 JP Pialasse <tests@pialasse.com> - 2.3.4-2.sme |
70 |
- Import to SME 10 [SME: 9335] |
71 |
|
72 |
* Mon Dec 10 2012 Tomas Hoger <thoger@fedoraproject.org> - 2.3.4-1 |
73 |
- Update to upstream version 2.3.4, which fixes CVE-2012-3478 and CVE-2012-2252 |
74 |
- Updated rsync-protocol.patch to fix CVE-2012-2251, and to apply on top of the |
75 |
CVE-2012-3478 and CVE-2012-2252 fixes. |
76 |
- Updated makefile.patch to preserve RPM CFLAGS. |
77 |
- Added command-line-error.patch (from Debian), correcting error message |
78 |
generated when insecure command line option is used (CVE-2012-3478 fix |
79 |
regression). |
80 |
|
81 |
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.3-4 |
82 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild |
83 |
|
84 |
* Mon Feb 6 2012 Daniel Drake <dsd@laptop.org> - 2.3.3-3 |
85 |
- Add patch for rsync3 compat (#485946) |
86 |
|
87 |
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.3-2 |
88 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild |
89 |
|
90 |
* Thu May 19 2011 Rahul Sundaram <sundaram@fedoraproject.org> - 2.3.3-1 |
91 |
- Upstream security fix release. Resolves rhbz#705904 |
92 |
|
93 |
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.2-8 |
94 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild |
95 |
|
96 |
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.2-7 |
97 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild |
98 |
|
99 |
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.2-6 |
100 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild |
101 |
|
102 |
* Thu Oct 30 2008 Ian Weller <ianweller@gmail.com> - 2.3.2-5 |
103 |
- Remove pre and post scripts |
104 |
- https://bugzilla.redhat.com/show_bug.cgi?id=456182#c17 |
105 |
|
106 |
* Mon Aug 11 2008 Rahul Sundaram <sundaram@fedoraproject.org> - 2.3.2-4 |
107 |
- Fix review issues and apply patch |
108 |
|
109 |
* Thu Aug 07 2008 Rahul Sundaram <sundaram@fedoraproject.org> - 2.3.2-3 |
110 |
- Fix postun to remove rssh shell |
111 |
|
112 |
* Wed Jul 30 2008 Rahul Sundaram <sundaram@fedoraproject.org> - 2.3.2-2 |
113 |
- Fix BR and defattr. Added a group and shell |
114 |
|
115 |
* Tue Jul 22 2008 Rahul Sundaram <sundaram@fedoraproject.org> - 2.3.2-1 |
116 |
- initial spec |
117 |
|