jonathan/openssh
1
0
Fork 0
forked from rpms/openssh
Code Pull Requests Activity

UseLogin yes is not supported in Fedora

Browse Source
This commit is contained in:
Jakub Jelen 2016-06-17 13:31:03 +02:00
parent c06fe506bc
commit 186bf3858e
2 changed files with 15 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
openssh-6.6p1-log-usepam-no.patch → openssh-7.2p2-UsePAM-UseLogin-warning.patch
View File

@ -1,11 +1,14 @@
diff --git a/sshd.c b/sshd.c diff --git a/sshd.c b/sshd.c
index a7b8b6a..24ab272 100644
--- a/sshd.c --- a/sshd.c
+++ b/sshd.c +++ b/sshd.c
@@ -1620,6 +1620,10 @@ main(int ac, char **av) @@ -1701,6 +1701,14 @@ main(int ac, char **av)
parse_server_config(&options, rexeced_flag ? "rexec" : config_file_name, parse_server_config(&options, rexeced_flag ? "rexec" : config_file_name,
&cfg, NULL); &cfg, NULL);
+ /* 'UseLogin yes' is not supported in Fedora */
+ if (options.use_login)
+ logit("WARNING: 'UseLogin yes' is not supported in Fedora and may cause several problems.");
+
+ /* 'UsePAM no' is not supported in Fedora */ + /* 'UsePAM no' is not supported in Fedora */
+ if (! options.use_pam) + if (! options.use_pam)
+ logit("WARNING: 'UsePAM no' is not supported in Fedora and may cause several problems."); + logit("WARNING: 'UsePAM no' is not supported in Fedora and may cause several problems.");
@ -14,7 +17,6 @@ index a7b8b6a..24ab272 100644
/* Fill in default values for those options not explicitly set. */ /* Fill in default values for those options not explicitly set. */
diff --git a/sshd_config b/sshd_config diff --git a/sshd_config b/sshd_config
index 36cb27a..c1b7c03 100644
--- a/sshd_config --- a/sshd_config
+++ b/sshd_config +++ b/sshd_config
@@ -101,6 +101,8 @@ GSSAPICleanupCredentials no @@ -101,6 +101,8 @@ GSSAPICleanupCredentials no
@ -26,3 +28,12 @@ index 36cb27a..c1b7c03 100644
UsePAM yes UsePAM yes
#AllowAgentForwarding yes #AllowAgentForwarding yes
@@ -113,6 +115,8 @@ X11Forwarding yes
#PrintMotd yes
#PrintLastLog yes
#TCPKeepAlive yes
+# WARNING: 'UseLogin yes' is not supported in Fedora and may cause several
+# problems.
#UseLogin no
#UsePrivilegeSeparation sandbox
#PermitUserEnvironment no

2
openssh.spec
View File

@ -159,7 +159,7 @@ Patch708: openssh-6.6p1-entropy.patch
#https://bugzilla.mindrot.org/show_bug.cgi?id=1640 (WONTFIX) #https://bugzilla.mindrot.org/show_bug.cgi?id=1640 (WONTFIX)
Patch709: openssh-6.2p1-vendor.patch Patch709: openssh-6.2p1-vendor.patch
# warn users for unsupported UsePAM=no (#757545) # warn users for unsupported UsePAM=no (#757545)
Patch711: openssh-6.6p1-log-usepam-no.patch Patch711: openssh-7.2p2-UsePAM-UseLogin-warning.patch
# make aes-ctr ciphers use EVP engines such as AES-NI from OpenSSL # make aes-ctr ciphers use EVP engines such as AES-NI from OpenSSL
Patch712: openssh-6.3p1-ctr-evp-fast.patch Patch712: openssh-6.3p1-ctr-evp-fast.patch
# add cavs test binary for the aes-ctr # add cavs test binary for the aes-ctr