rpms/openssh
7
0
Fork 1
Code Issues Pull Requests Releases Activity

- remove obsolete --with-rsh (#478298)

Browse Source 
- add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
- move system-auth after pam_selinux in the session stack
This commit is contained in:
Tomáš Mráz 2009-01-15 10:52:07 +00:00
parent 9e5c6ecd02
commit 6a5e296ba7
2 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
openssh.spec
View File

@ -63,7 +63,7 @@
Summary: An open source implementation of SSH protocol versions 1 and 2 Summary: An open source implementation of SSH protocol versions 1 and 2
Name: openssh Name: openssh
Version: 5.1p1 Version: 5.1p1
Release: 4%{?dist}%{?rescue_rel} Release: 5%{?dist}%{?rescue_rel}
URL: http://www.openssh.com/portable.html URL: http://www.openssh.com/portable.html
#Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz #Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz
#Source1: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz.asc #Source1: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz.asc
@ -264,7 +264,6 @@ fi
--libexecdir=%{_libexecdir}/openssh \ --libexecdir=%{_libexecdir}/openssh \
--datadir=%{_datadir}/openssh \ --datadir=%{_datadir}/openssh \
--with-tcp-wrappers \ --with-tcp-wrappers \
--with-rsh=%{_bindir}/rsh \
--with-default-path=/usr/local/bin:/bin:/usr/bin \ --with-default-path=/usr/local/bin:/bin:/usr/bin \
--with-superuser-path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin \ --with-superuser-path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin \
--with-privsep-path=%{_var}/empty/sshd \ --with-privsep-path=%{_var}/empty/sshd \
@ -479,6 +478,12 @@ fi
%endif %endif
%changelog %changelog
* Thu Jan 15 2009 Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
- remove obsolete --with-rsh (#478298)
- add pam_sepermit to allow blocking confined users in permissive mode
(#471746)
- move system-auth after pam_selinux in the session stack
* Thu Dec 11 2008 Tomas Mraz <tmraz@redhat.com> - 5.1p1-4 * Thu Dec 11 2008 Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
- set FD_CLOEXEC on channel sockets (#475866) - set FD_CLOEXEC on channel sockets (#475866)
- adjust summary - adjust summary

3
sshd.pam
View File

@ -1,12 +1,13 @@
#%PAM-1.0 #%PAM-1.0
auth required pam_sepermit.so
auth include system-auth auth include system-auth
account required pam_nologin.so account required pam_nologin.so
account include system-auth account include system-auth
password include system-auth password include system-auth
# pam_selinux.so close should be the first session rule # pam_selinux.so close should be the first session rule
session required pam_selinux.so close session required pam_selinux.so close
session include system-auth
session required pam_loginuid.so session required pam_loginuid.so
# pam_selinux.so open should only be followed by sessions to be executed in the user context # pam_selinux.so open should only be followed by sessions to be executed in the user context
session required pam_selinux.so open env_params session required pam_selinux.so open env_params
session optional pam_keyinit.so force revoke session optional pam_keyinit.so force revoke
session include system-auth