openssh-vl.spec 30 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920
  1. %bcond_with systemd
  2. # SELinux
  3. %define WITH_SELINUX 0
  4. # OpenSSH privilege separation requires a user & group ID
  5. %define sshd_uid 74
  6. %define sshd_gid 74
  7. # Do we want to disable building of gnome-askpass? (1=yes 0=no)
  8. %define no_gnome_askpass 0
  9. # Use GTK3 for gnome-ssh-askpass
  10. %define gtk3 1
  11. # Build position-independent executables (requires toolchain support)?
  12. %define pie 1
  13. # Do we want to link against a static libcrypto? (1=yes 0=no)
  14. %define static_libcrypto 0
  15. # Do we want smartcard support (1=yes 0=no)
  16. %define scard 0
  17. # Disable IPv6 (avoids DNS hangs on some glibc versions)
  18. %define noip6 0
  19. # Do we want kerberos5 support (1=yes 0=no)
  20. %define kerberos5 0
  21. # Reserve options to override askpass settings with:
  22. # rpm -ba|--rebuild --define 'skip_xxx 1'
  23. %{?skip_gnome_askpass:%define no_gnome_askpass 1}
  24. # Options for static OpenSSL link:
  25. # rpm -ba|--rebuild --define "static_openssl 1"
  26. %{?static_openssl:%define static_libcrypto 1}
  27. # Options for Smartcard support: (needs libsectok and openssl-engine)
  28. # rpm -ba|--rebuild --define "smartcard 1"
  29. %{?smartcard:%define scard 1}
  30. # Option to disable ipv6
  31. # rpm -ba|--rebuild --define "noipv6 1"
  32. %{?noipv6:%define noip6 1}
  33. # Is this a build for the rescue CD (without PAM)? (1=yes 0=no)
  34. %define rescue 0
  35. %{?build_rescue:%define rescue 1}
  36. # Turn off some stuff for resuce builds
  37. %if %{rescue}
  38. %define kerberos5 0
  39. %endif
  40. Summary: The OpenSSH implementation of SSH.
  41. Summary(ja): OpenSSH - フリーの Secure Shell (SSH) の実装
  42. Name: openssh
  43. Version: 8.6p1
  44. Release: 1%{_dist_release}%{?with_systemd:.systemd}
  45. Group: network
  46. Vendor: Project Vine
  47. Distribution: Vine Linux
  48. Packager: daisuke
  49. License: BSD
  50. URL: https://www.openssh.com/portable.html
  51. Source0: https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz
  52. # files for systemd
  53. Source9: sshd@.service
  54. Source10: sshd.socket
  55. Source11: sshd.service
  56. Source12: sshd-keygen@.service
  57. Source13: sshd-keygen
  58. Source14: sshd.tmpfiles
  59. Source15: sshd-keygen.target
  60. Patch0: openssh-8.4p1-vine.patch
  61. #Patch4: openssh-8.0p1-vendor.patch
  62. # Patch12: openssh-selinux.patch
  63. # Patch20: openssh-3.9p1-gssapimitm.patch
  64. Patch21: openssh-7.6p1-safe-stop.patch
  65. Patch24: openssh-7.6p1-fromto-remote.patch
  66. Patch26: openssh-5.2p1-pam-no-stack.patch
  67. # Patch27: openssh-5.1p1-log-in-chroot.patch
  68. # Patch30: openssh-5.6p1-exit-deadlock.patch
  69. # Patch31: openssh-3.9p1-skip-used.patch
  70. Patch35: openssh-8.2p1-askpass-progress-gtk3.patch
  71. # Help systemd to track the running service
  72. Patch948: openssh-7.4p1-systemd.patch
  73. # Vine Source
  74. Source100: sshd.init.vine
  75. Source110: sshd.sysconfig.vine
  76. BuildRoot: %{_tmppath}/%{name}-%{version}-buildroot
  77. Obsoletes: ssh
  78. BuildRequires: perl, openssl-devel
  79. BuildRequires: util-linux
  80. %if "%{_dist_release}" >= "vl7"
  81. BuildRequires: libdb-devel
  82. %else
  83. BuildRequires: db4-devel
  84. %endif
  85. BuildRequires: pam-devel
  86. BuildRequires: zlib-devel
  87. %if ! %{no_gnome_askpass}
  88. BuildRequires: libX11-devel
  89. BuildRequires: gtk3-devel
  90. %endif
  91. BuildRequires: xorg-x11-xauth
  92. BuildRequires: groff
  93. BuildRequires: libedit-devel
  94. %if %{with systemd}
  95. BuildRequires: systemd-devel
  96. %endif
  97. %description
  98. SSH (Secure SHell) is a program for logging into and executing
  99. commands on a remote machine. SSH is intended to replace rlogin and
  100. rsh, and to provide secure encrypted communications between two
  101. untrusted hosts over an insecure network. X11 connections and
  102. arbitrary TCP/IP ports can also be forwarded over the secure channel.
  103. OpenSSH is OpenBSD's version of the last free version of SSH, bringing
  104. it up to date in terms of security and features, as well as removing
  105. all patented algorithms to separate libraries.
  106. This package includes the core files necessary for both the OpenSSH
  107. client and server. To make this package useful, you should also
  108. install openssh-clients, openssh-server, or both.
  109. #'
  110. %description -l ja
  111. OpenSSH は、ネットワーク接続ツールである SSH プロトコル実装の フリー版 です。
  112. Ssh はリモートマシンへログインしたり、リモートマシンでコマンドを実行したり
  113. するためのプログラムです。rlogin や rsh を置き換えるもので、二つの信頼でき
  114. ないホスト間の信頼できない通信路でセキュアで暗号化された通信を行うことが
  115. 可能にします。X11 のコネクションやあらゆる TCP/IP のポートもまた、セキュア
  116. な通信路の中を通すことができます。
  117. OpenSSH は OpenBSD による最後のフリーのバージョンの再実装で、
  118. 最新のセキュリティと機能を提供しています。またすべての特許がからむ
  119. アルゴリズムは分割したライブラリにわかれています。
  120. このパッケージは OpenSSH のクライアントとサーバの両方で必要とされる
  121. コアのファイルを含んでいます。実際に使用するにはこのパッケージの他に
  122. openssh-clients および/または openssh-server が必要です。
  123. %package clients
  124. Summary: OpenSSH clients.
  125. Summary(ja): OpenSSH Secure Shell プロトコルクライアント
  126. Requires: openssh = %{version}-%{release}
  127. Group: network
  128. Obsoletes: ssh-clients
  129. Obsoletes: openssh-contrib
  130. %description clients
  131. OpenSSH is a free version of SSH (Secure SHell), a program for logging
  132. into and executing commands on a remote machine. This package includes
  133. the clients necessary to make encrypted connections to SSH servers.
  134. You'll also need to install the openssh package on OpenSSH clients.
  135. #'
  136. %description -l ja clients
  137. OpenSSH は、ネットワーク接続ツールである SSH プロトコル実装の フリー版 です。
  138. Ssh はリモートマシンへログインしたり、リモートマシンでコマンドを実行したり
  139. するためのプログラムです。rlogin や rsh を置き換えるもので、二つの信頼でき
  140. ないホスト間の信頼できない通信路でセキュアで暗号化された通信を行うことが
  141. 可能にします。X11 のコネクションやあらゆる TCP/IP のポートもまた、セキュア
  142. な通信路の中を通すことができます。
  143. OpenSSH は OpenBSD による最後のフリーのバージョンの再実装で、
  144. 最新のセキュリティと機能を提供しています。またすべての特許がからむ
  145. アルゴリズムは分割したライブラリにわかれています。
  146. このパッケージは OpenSSH をクライアントとして使用する場合に
  147. 必要なものを含んでいます。
  148. %package server
  149. Summary: The OpenSSH server daemon.
  150. Summary(ja): OpenSSH Secure Shell プロトコルサーバ (sshd)
  151. Group: servers
  152. Obsoletes: ssh-server
  153. Requires(post): openssh = %{version}-%{release}
  154. Requires(post): chkconfig
  155. Requires(pre): shadow-utils
  156. Requires(post): initscripts >= 5.20
  157. Requires: pam
  158. %description server
  159. OpenSSH is a free version of SSH (Secure SHell), a program for logging
  160. into and executing commands on a remote machine. This package contains
  161. the secure shell daemon (sshd). The sshd daemon allows SSH clients to
  162. securely connect to your SSH server. You also need to have the openssh
  163. package installed.
  164. %description -l ja server
  165. OpenSSH は、ネットワーク接続ツールである SSH プロトコル実装の フリー版 です。
  166. Ssh はリモートマシンへログインしたり、リモートマシンでコマンドを実行したり
  167. するためのプログラムです。rlogin や rsh を置き換えるもので、二つの信頼でき
  168. ないホスト間の信頼できない通信路でセキュアで暗号化された通信を行うことが
  169. 可能にします。X11 のコネクションやあらゆる TCP/IP のポートもまた、セキュア
  170. な通信路の中を通すことができます。
  171. OpenSSH は OpenBSD による最後のフリーのバージョンの再実装で、
  172. 最新のセキュリティと機能を提供しています。またすべての特許がからむ
  173. アルゴリズムは分割したライブラリにわかれています。
  174. このパッケージは OpenSSH をサーバとして使用する場合に必要な
  175. デーモンなどを含んでいます。
  176. %package askpass-gnome
  177. Summary: A passphrase dialog for OpenSSH, X, and GNOME.
  178. Summary(ja): OpenSSH GNOME パスフレーズ入力ダイアログ
  179. Group: network
  180. Requires: openssh = %{version}-%{release}
  181. Obsoletes: ssh-extras
  182. Obsoletes: openssh-askpass < 5.5p1-3vl6
  183. Provides: openssh-askpass = %{version}-%{release}
  184. %description askpass-gnome
  185. OpenSSH is a free version of SSH (Secure SHell), a program for logging
  186. into and executing commands on a remote machine. This package contains
  187. an X11 passphrase dialog for OpenSSH and the GNOME GUI desktop
  188. environment.
  189. %description -l ja askpass-gnome
  190. OpenSSH は、ネットワーク接続ツールである SSH プロトコル実装の フリー版 です。
  191. Ssh はリモートマシンへログインしたり、リモートマシンでコマンドを実行したり
  192. するためのプログラムです。rlogin や rsh を置き換えるもので、二つの信頼でき
  193. ないホスト間の信頼できない通信路でセキュアで暗号化された通信を行うことが
  194. 可能にします。X11 のコネクションやあらゆる TCP/IP のポートもまた、セキュア
  195. な通信路の中を通すことができます。
  196. OpenSSH は OpenBSD による最後のフリーのバージョンの再実装で、
  197. 最新のセキュリティと機能を提供しています。またすべての特許がからむ
  198. アルゴリズムは分割したライブラリにわかれています。
  199. このパッケージは GNOME 用のパスフレーズ入力ダイアログを含んでいます。
  200. %debug_package
  201. %prep
  202. %setup -q
  203. %patch0 -p1 -b .vine
  204. #patch4 -p1 -b .vendor
  205. %if %{WITH_SELINUX}
  206. #SELinux
  207. #%patch12 -p1 -b .selinux
  208. %endif
  209. %patch21 -p1 -b .safe-stop
  210. %patch24 -p1 -b .fromto-remote
  211. %patch26 -p1 -b .stack
  212. # %patch27 -p1 -b .log-chroot
  213. # %patch30 -p1 -b .exit-deadlock
  214. # %patch35 -p1 -b .progress
  215. %if %{with systemd}
  216. %patch948 -p1
  217. %endif
  218. autoreconf
  219. %build
  220. CFLAGS="$RPM_OPT_FLAGS"; export CFLAGS
  221. %if %{rescue}
  222. CFLAGS="$RPM_OPT_FLAGS -Os"; export CFLAGS
  223. %endif
  224. %if %{pie}
  225. %ifarch s390 s390x sparc sparc64
  226. CFLAGS="$CFLAGS -fPIC"
  227. %else
  228. CFLAGS="$CFLAGS -fpic"
  229. %endif
  230. SAVE_LDFLAGS="$LDFLAGS"
  231. LDFLAGS="$LDFLAGS -pie -z relro -z now"; export LDFLAGS
  232. export CFLAGS
  233. export LDFLAGS
  234. %endif
  235. %configure \
  236. --sysconfdir=%{_sysconfdir}/ssh \
  237. --libexecdir=%{_libexecdir}/openssh \
  238. --datadir=%{_datadir}/openssh \
  239. --with-default-path=/usr/local/bin:/bin:/usr/bin \
  240. --with-superuser-path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin --with-privsep-path=%{_var}/empty/sshd \
  241. --disable-strip \
  242. --with-ipaddr-display \
  243. --with-pie=no \
  244. --enable-vendor-patchlevel="VL-%{version}-%{release}" \
  245. --with-libedit \
  246. --with-xauth=/usr/bin/xauth \
  247. %if %{scard}
  248. --with-smartcard \
  249. %endif
  250. %if %{noip6}
  251. --with-ipv4-default \
  252. %endif
  253. %if %{rescue}
  254. --without-pam --with-md5-passwords \
  255. %else
  256. --with-pam \
  257. %endif
  258. %if %{with systemd}
  259. --with-systemd \
  260. %endif
  261. %{nil}
  262. %if %{static_libcrypto}
  263. perl -pi -e "s|-lcrypto|%{_libdir}/libcrypto.a|g" Makefile
  264. %endif
  265. %make_build
  266. %if %{gtk3}
  267. gtk3=yes
  268. %else
  269. gtk3=no
  270. %endif
  271. %if ! %{no_gnome_askpass}
  272. pushd contrib
  273. if [ $gtk3 = yes ]; then
  274. make gnome-ssh-askpass3
  275. mv gnome-ssh-askpass3 gnome-ssh-askpass
  276. else
  277. make gnome-ssh-askpass2
  278. mv gnome-ssh-askpass2 gnome-ssh-askpass
  279. fi
  280. popd
  281. %endif
  282. %install
  283. rm -rf $RPM_BUILD_ROOT
  284. mkdir -p -m755 $RPM_BUILD_ROOT%{_sysconfdir}/ssh
  285. mkdir -p -m755 $RPM_BUILD_ROOT%{_libexecdir}/openssh
  286. mkdir -p -m755 $RPM_BUILD_ROOT%{_var}/empty/sshd
  287. mkdir -p -m755 $RPM_BUILD_ROOT%{_var}/empty/sshd/etc
  288. make install DESTDIR=$RPM_BUILD_ROOT
  289. touch $RPM_BUILD_ROOT%{_var}/empty/sshd/etc/localtime
  290. install -d $RPM_BUILD_ROOT/etc/pam.d/
  291. install -d $RPM_BUILD_ROOT/etc/rc.d/init.d
  292. install -d $RPM_BUILD_ROOT/etc/sysconfig/
  293. install -d $RPM_BUILD_ROOT%{_libexecdir}/openssh
  294. install -m644 contrib/redhat/sshd.pam $RPM_BUILD_ROOT/etc/pam.d/sshd
  295. install -m644 %{SOURCE110} $RPM_BUILD_ROOT/etc/sysconfig/sshd
  296. %if %{with systemd}
  297. install -d -m755 $RPM_BUILD_ROOT/%{_unitdir}
  298. install -m644 %{SOURCE9} $RPM_BUILD_ROOT/%{_unitdir}/sshd@.service
  299. install -m644 %{SOURCE10} $RPM_BUILD_ROOT/%{_unitdir}/sshd.socket
  300. install -m644 %{SOURCE11} $RPM_BUILD_ROOT/%{_unitdir}/sshd.service
  301. install -m644 %{SOURCE12} $RPM_BUILD_ROOT/%{_unitdir}/sshd-keygen@.service
  302. install -m644 %{SOURCE15} $RPM_BUILD_ROOT/%{_unitdir}/sshd-keygen.target
  303. install -m744 %{SOURCE13} $RPM_BUILD_ROOT/%{_libexecdir}/openssh/sshd-keygen
  304. install -m755 contrib/ssh-copy-id $RPM_BUILD_ROOT%{_bindir}/
  305. install contrib/ssh-copy-id.1 $RPM_BUILD_ROOT%{_mandir}/man1/
  306. install -m644 -D %{SOURCE14} $RPM_BUILD_ROOT%{_tmpfilesdir}/%{name}.conf
  307. %else
  308. install -m755 %{SOURCE100} $RPM_BUILD_ROOT/etc/rc.d/init.d/sshd
  309. %endif
  310. %if ! %{scard}
  311. rm -f $RPM_BUILD_ROOT%{_datadir}/openssh/Ssh.bin
  312. %endif
  313. %if ! %{no_gnome_askpass}
  314. install -s contrib/gnome-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/gnome-ssh-askpass
  315. install -m 755 -d $RPM_BUILD_ROOT%{_sysconfdir}/profile.d/
  316. install -m 755 contrib/redhat/gnome-ssh-askpass.{sh,csh} $RPM_BUILD_ROOT%{_sysconfdir}/profile.d/
  317. %endif
  318. %if %{no_gnome_askpass}
  319. rm -f $RPM_BUILD_ROOT/etc/profile.d/gnome-ssh-askpass.*
  320. %endif
  321. # for contrib package
  322. install -m 0755 contrib/ssh-copy-id $RPM_BUILD_ROOT%{_bindir}
  323. install -m 0644 contrib/ssh-copy-id.1 $RPM_BUILD_ROOT%{_mandir}/man1
  324. mv contrib/README contrib/README.contrib
  325. perl -pi -e "s|$RPM_BUILD_ROOT||g" $RPM_BUILD_ROOT%{_mandir}/man*/*
  326. %clean
  327. rm -rf $RPM_BUILD_ROOT
  328. %triggerun server -- ssh-server
  329. if [ "$1" != 0 -a -r /var/run/sshd.pid ] ; then
  330. touch /var/run/sshd.restart
  331. fi
  332. %triggerun server -- openssh-server < 2.5.0p1
  333. # Count the number of HostKey and HostDsaKey statements we have.
  334. gawk 'BEGIN {IGNORECASE=1}
  335. /^hostkey/ || /^hostdsakey/ {sawhostkey = sawhostkey + 1}
  336. END {exit sawhostkey}' /etc/ssh/sshd_config
  337. # And if we only found one, we know the client was relying on the old default
  338. # behavior, which loaded the the SSH2 DSA host key when HostDsaKey wasn't
  339. # specified. Now that HostKey is used for both SSH1 and SSH2 keys, specifying
  340. # one nullifies the default, which would have loaded both.
  341. if [ $? -eq 1 ] ; then
  342. echo HostKey /etc/ssh/ssh_host_rsa_key >> /etc/ssh/sshd_config
  343. echo HostKey /etc/ssh/ssh_host_dsa_key >> /etc/ssh/sshd_config
  344. fi
  345. %triggerpostun server -- ssh-server
  346. if [ "$1" != 0 ] ; then
  347. /sbin/chkconfig --add sshd
  348. if test -f /var/run/sshd.restart ; then
  349. rm -f /var/run/sshd.restart
  350. # /sbin/service sshd start > /dev/null 2>&1 || :
  351. /sbin/service sshd start
  352. fi
  353. fi
  354. %if %{with systemd}
  355. %pre
  356. getent group ssh_keys >/dev/null || groupadd -r ssh_keys || :
  357. %endif
  358. %pre server
  359. %{_sbindir}/groupadd -r -g %{sshd_gid} sshd 2>/dev/null || :
  360. %{_sbindir}/useradd -d /var/empty/sshd -s /bin/false -u %{sshd_uid} \
  361. -g sshd -M -r sshd 2>/dev/null || :
  362. %post server
  363. %if %{with systemd}
  364. %systemd_post sshd.service sshd.socket
  365. %else
  366. /sbin/chkconfig --add sshd
  367. %endif
  368. %postun server
  369. %if %{with systemd}
  370. %systemd_postun_with_restart sshd.service
  371. %else
  372. # /sbin/service sshd condrestart > /dev/null 2>&1 || :
  373. if [ "$1" -gt 0 ]; then
  374. /sbin/service sshd condrestart
  375. fi
  376. exit 0
  377. %endif
  378. %preun server
  379. %if %{with systemd}
  380. %systemd_preun sshd.service sshd.socket
  381. %else
  382. if [ "$1" = 0 -o -x /bin/systemctl ]; then
  383. /sbin/service sshd stop > /dev/null 2>&1 || :
  384. /sbin/chkconfig --del sshd
  385. fi
  386. %endif
  387. %files
  388. %defattr(-,root,root)
  389. %license LICENCE
  390. %doc CREDITS ChangeLog INSTALL OVERVIEW PROTOCOL* README* TODO
  391. %attr(0755,root,root) %dir %{_sysconfdir}/ssh
  392. %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ssh/moduli
  393. %attr(644,root,root) %{_mandir}/man5/moduli.5*
  394. %if ! %{rescue}
  395. %attr(0755,root,root) %{_bindir}/ssh-keygen
  396. %attr(0644,root,root) %{_mandir}/man1/ssh-keygen.1*
  397. %attr(0755,root,root) %dir %{_libexecdir}/openssh
  398. %attr(4711,root,root) %{_libexecdir}/openssh/ssh-keysign
  399. %attr(0644,root,root) %{_mandir}/man8/ssh-keysign.8*
  400. %endif
  401. %if %{scard}
  402. %attr(0755,root,root) %dir %{_datadir}/openssh
  403. %attr(0644,root,root) %{_datadir}/openssh/Ssh.bin
  404. %endif
  405. %files clients
  406. %defattr(-,root,root)
  407. %attr(0755,root,root) %{_bindir}/scp
  408. %attr(0755,root,root) %{_bindir}/ssh
  409. %attr(0644,root,root) %{_mandir}/man1/scp.1*
  410. %attr(0644,root,root) %{_mandir}/man1/ssh.1*
  411. %attr(0644,root,root) %{_mandir}/man5/ssh_config.5*
  412. # %attr(0644,root,root) %{_mandir}/man1/slogin.1*
  413. %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ssh/ssh_config
  414. # %attr(-,root,root) %{_bindir}/slogin
  415. %if ! %{rescue}
  416. %attr(0755,root,root) %{_bindir}/ssh-agent
  417. %attr(0755,root,root) %{_bindir}/ssh-add
  418. %attr(0755,root,root) %{_bindir}/ssh-keyscan
  419. %attr(0755,root,root) %{_bindir}/sftp
  420. %attr(0755,root,root) %{_bindir}/ssh-copy-id
  421. %attr(0755,root,root) %{_libexecdir}/openssh/ssh-pkcs11-helper
  422. %attr(0755,root,root) %{_libexecdir}/openssh/ssh-sk-helper
  423. %attr(0644,root,root) %{_mandir}/man1/ssh-agent.1*
  424. %attr(0644,root,root) %{_mandir}/man1/ssh-add.1*
  425. %attr(0644,root,root) %{_mandir}/man1/ssh-keyscan.1*
  426. %attr(0644,root,root) %{_mandir}/man1/sftp.1*
  427. %attr(0644,root,root) %{_mandir}/man1/ssh-copy-id.1*
  428. %attr(0644,root,root) %{_mandir}/man8/ssh-pkcs11-helper.8*
  429. %attr(0644,root,root) %{_mandir}/man8/ssh-sk-helper.8*
  430. %endif
  431. %if ! %{rescue}
  432. %files server
  433. %defattr(-,root,root)
  434. %dir %attr(0711,root,root) %{_var}/empty/sshd
  435. %dir %attr(0755,root,root) %{_var}/empty/sshd/etc
  436. %ghost %verify(not md5 size mtime) %{_var}/empty/sshd/etc/localtime
  437. %attr(0755,root,root) %{_sbindir}/sshd
  438. %attr(0755,root,root) %{_libexecdir}/openssh/sftp-server
  439. %attr(0644,root,root) %{_mandir}/man5/sshd_config.5*
  440. %attr(0644,root,root) %{_mandir}/man8/sshd.8*
  441. %attr(0644,root,root) %{_mandir}/man8/sftp-server.8*
  442. %attr(0755,root,root) %dir %{_sysconfdir}/ssh
  443. %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ssh/sshd_config
  444. %attr(0600,root,root) %config(noreplace) /etc/pam.d/sshd
  445. %attr(0755,root,root) %config /etc/sysconfig/sshd
  446. %if %{with systemd}
  447. %attr(0755,root,root) %{_libexecdir}/openssh/sshd-keygen
  448. %attr(0644,root,root) %{_unitdir}/sshd.service
  449. %attr(0644,root,root) %{_unitdir}/sshd@.service
  450. %attr(0644,root,root) %{_unitdir}/sshd.socket
  451. %attr(0644,root,root) %{_unitdir}/sshd-keygen@.service
  452. %attr(0644,root,root) %{_unitdir}/sshd-keygen.target
  453. %attr(0644,root,root) %{_tmpfilesdir}/openssh.conf
  454. %else
  455. %attr(0755,root,root) %config /etc/rc.d/init.d/sshd
  456. %endif
  457. %endif
  458. %if ! %{no_gnome_askpass}
  459. %files askpass-gnome
  460. %defattr(-,root,root)
  461. %attr(0755,root,root) %config %{_sysconfdir}/profile.d/gnome-ssh-askpass.*
  462. %attr(0755,root,root) %{_libexecdir}/openssh/gnome-ssh-askpass
  463. %endif
  464. %changelog
  465. * Wed Apr 21 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 8.6p1-1
  466. - new upstream release.
  467. * Tue Mar 09 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 8.5p1-1
  468. - new upstream release.
  469. * Wed Oct 07 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 8.4p1-1
  470. - new upstream release.
  471. - updated Patch0.
  472. - disabled Patch35.
  473. * Wed May 27 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 8.3p1-1
  474. - new upstream release.
  475. * Thu Apr 02 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 8.2p1-2
  476. - added systemd support (disabled as default).
  477. * Thu Mar 19 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 8.2p1-1
  478. - new upstream release.
  479. - updated Patch35.
  480. * Thu Oct 17 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 8.1p1-1
  481. - new upstream release.
  482. * Sat Jun 22 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 8.0p1-1
  483. - new upstream release.
  484. - moved scp to openssh-clients.
  485. - changed "PasswordAuthentication" to "no" as default.
  486. - dropped Patch4.
  487. - updated Patch35 to use GTK+3 for gnome-ssh-askpass.
  488. * Tue Nov 06 2018 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.9p1-1
  489. - new upstream release.
  490. - updated Patch4.
  491. * Wed Nov 15 2017 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 7.6p1-1
  492. - new upstream release.
  493. - update patch0,4,21,24
  494. - update patch35 from fc26
  495. - drop patch12,20,30
  496. * Fri Aug 5 2016 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.2p2-2
  497. - disabled rsa1 hostkey generation.
  498. * Sat Jul 30 2016 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.2p2-1
  499. - new upstream release.
  500. * Wed Mar 9 2016 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 7.2p1-1
  501. - new upstream release
  502. - built with openssl 1.0.2g
  503. - drop slogin command and manual, this is upstream change.
  504. * Sun Jan 17 2016 Daisuke SUZUKI <daisuke@vinelinux.org> 7.1p2-1
  505. - update to 7.1p2
  506. * Mon Dec 28 2015 Daisuke SUZUKI <daisuke@vinelinux.org> 7.1p1-1
  507. - update to 7.1p1
  508. - remove patch100 to use default value "prohibit-password" for PermitRootLogin
  509. * Tue Oct 14 2014 Daisuke SUZUKI <daisuke@vinelinux.org> 6.7p1-1
  510. - update to 6.7p1
  511. - fix sshd.init
  512. * Thu Aug 07 2014 Daisuke SUZUKI <daisuke@vinelinux.org> 6.6p1-1
  513. - update to 6.6p1
  514. - remove BR: sharutils
  515. - add BR: libdb-devel instead of db4-devel
  516. * Tue Feb 04 2014 Daisuke SUZUKI <daisuke@linux.or.jp> 6.5p1-1
  517. - update to 6.5p1
  518. - update sshd_config
  519. - generate ED25519 host key.
  520. * Tue Nov 12 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 6.4p1-1
  521. - update to 6.4p1
  522. * Mon May 20 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 6.2p2-1
  523. - update to 6.2p2
  524. * Fri Mar 22 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 6.2p1-1
  525. - update to 6.2p1
  526. * Fri Nov 2 2012 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 6.1p1-1
  527. - new upstream release
  528. - add -with-xauth option in configure
  529. - patch4, 30, 35 are updated from fc18
  530. * Mon May 07 2012 Daisuke SUZUKI <daisuke@linux.or.jp> 6.0p1-1
  531. - new upstream release
  532. * Tue Mar 06 2012 Daisuke SUZUKI <daisuke@linux.or.jp> 5.9p1-1
  533. - new upstream release
  534. * Sun May 8 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 5.8p2-1
  535. - new upstream release
  536. * Tue Apr 19 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 5.8p1-2
  537. - add our own sshd.init based on fedora's sshd.init
  538. - generate ECDSA host key.
  539. * Sat Feb 05 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 5.8p1-1
  540. - new upstream release
  541. * Tue Jan 25 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 5.7p1-1
  542. - new upstream release
  543. * Mon Jan 10 2011 Daisuke SUZUKI <daisuke@linux.or.jp> 5.6p1-1
  544. - new upstream release
  545. - obsolete contrib subpackage, move ssh-copy-id to client subpackage
  546. * Sun Jan 9 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 5.5p1-4
  547. - rebuilt with openssl 1.0.0c
  548. * Sun May 23 2010 Daisuke SUZUKI <daisuke@linux.or.jp> 5.5p1-3
  549. - drop x11-askpass, add Obsoletes: openssh-askpass
  550. - add BR: groff
  551. - enable --with-libedit option, add BR: libedit-devel
  552. - remove unrecognized option '--with-rsh'
  553. * Sun May 23 2010 Daisuke SUZUKI <daisuke@linux.or.jp> 5.5p1-2
  554. - add BR: xorg-x11-xauth for X11 forwarding support
  555. * Thu Apr 22 2010 Daisuke SUZUKI <daisuke@linux.or.jp> 5.5p1-1
  556. - new upstream release
  557. - update patch0,2
  558. - drop patch3,22
  559. * Tue Feb 24 2009 Daisuke SUZUKI <daisuke@linux.or.jp> 5.2p1-1
  560. - new upstream release
  561. * Tue Jul 22 2008 Daisuke SUZUKI <daisuke@linux.or.jp> 5.1p1-1
  562. - new upstream release
  563. * Thu May 29 2008 Daisuke SUZUKI <daisuke@linux.or.jp> 5.0p1-2
  564. - rebuild with xorg-x11-7.3
  565. * Fri Apr 04 2008 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 5.0p1-1
  566. - new upstream release with security fix (CVE-2008-1483)
  567. - drop patch31 which is included in new release (This was for CVE-2008-1483)
  568. * Tue Apr 01 2008 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 4.9p1-1
  569. - new upstream release with security fix ("ForceCommand" Directive)
  570. - turn on daemon restart message
  571. - new versioning policy
  572. * Mon Nov 26 2007 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 4.7p1-0vl2
  573. - add /var/empty/sshd/etc/localtime to fix secure log bad timestamps
  574. * Tue Nov 13 2007 Daisuke SUZUKI <daisuke@linux.or.jp> 4.7p1-0vl1
  575. - new upstream release
  576. * Thu May 17 2007 Daisuke SUZUKI <daisuke@linux.or.jp> 4.6p1-0vl2
  577. - build with -fpie/-pie by default.
  578. - enable ipv6 by default.
  579. * Fri May 04 2007 Daisuke SUZUKI <daisuke@linux.or.jp> 4.6p1-0vl1
  580. - new upstream release
  581. * Wed Nov 08 2006 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 4.5p1-0vl1
  582. - new upstream release
  583. * Fri Sep 29 2006 Daisuke SUZUKI <daisuke@linux.or.jp> 4.4p1-0vl1
  584. - new upstream release
  585. * Thu Jul 27 2006 Daisuke SUZUKI <daisuke@linux.or.jp> 4.3p2-0vl1
  586. - new upstream release
  587. * Mon Apr 10 2006 Daisuke SUZUKI <daisuke@linux.or.jp> 4.3p1-0vl1
  588. - new upstream release
  589. - remove build6x stuff
  590. - remove libgnome-devel from BuildRequires
  591. - cleanup BuildRequires
  592. - drop Patch200, it is merged in upstream.
  593. - import patches(25-35) from FC-devel
  594. * Mon Apr 10 2006 IWAI, Masaharu <iwai@alib.jp> 4.2p1-0vl3
  595. - SECURITY FIX: CVE-2006-0225
  596. - add scp no system patch ( Patch200 ): from Fedora Core 4 4.2p1-fc4.10
  597. - update BuildPreReq: s/XFree86-devel/XOrg-devel/
  598. - fix BuildPreReq for GNOME: gnome-libs-devel ( GNOME1 ) was always used
  599. - When GNOME2 is used, using libgnome-devel
  600. - add BuildPreReq: gtk2-devel for GNOME2
  601. * Sat Sep 24 2005 Daisuke SUZUKI <daisuke@linux.or.jp> 4.2p1-0vl2
  602. - rebuild with gtk+-2.8 final
  603. * Sun Sep 4 2005 Daisuke SUZUKI <daisuke@linux.or.jp> 4.2p1-0vl1
  604. - new upstream release
  605. - build with gtk+-2.7
  606. * Sun May 29 2005 Daisuke SUZUKI <daisuke@linux.or.jp> 4.1p1-0vl1
  607. - new upstream release
  608. * Fri Apr 01 2005 KOBAYASHI Taizo <tkoba@vinelinux.org> 4.0p1-0vl2
  609. - cleanup obsolete patches and added patches from fedora
  610. * Wed Mar 16 2005 Daisuke SUZUKI <daisuke@linux.or.jp> 4.0p1-0vl1
  611. - new upstream release
  612. * Thu Aug 19 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 3.9pl1-0vl1
  613. - new upstream release
  614. * Wed Apr 21 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 3.8.1p1-0vl1
  615. - new upstream release
  616. * Fri Mar 26 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 3.8p1-0vl2
  617. - rebuild with openssl-0.9.7d
  618. * Fri Feb 27 2004 Daisuke SUZUKI <daisuke@linux.or.jp> 3.8p1-0vl1
  619. - new upstream release
  620. * Thu Oct 2 2003 IWAI, Masaharu <iwai@alib.jp> 3.7.1p2-0vl2
  621. - create contrib package
  622. * Wed Sep 24 2003 Daisuke SUZUKI <daisuke@linux.or.jp> 3.7.1p2-0vl1
  623. - new upstream release
  624. - fix security issue: http://www.openssh.com/txt/sshpam.adv
  625. * Wed Sep 17 2003 Daisuke SUZUKI <daisuke@linux.or.jp> 3.7.1p1-0vl1
  626. - new upstream release
  627. - fix security issue: http://www.openssh.com/txt/buffer.adv
  628. * Wed Sep 17 2003 Daisuke SUZUKI <daisuke@linux.or.jp> 3.7p1-0vl1
  629. - new upstream release
  630. * Thu May 1 2003 Daisuke SUZUKI <daisuke@linux.or.jp> 3.6.1p2-0vl1.1
  631. - rebuild with gtk2
  632. * Thu May 1 2003 Daisuke SUZUKI <daisuke@linux.or.jp> 3.6.1p2-0vl1
  633. - new upstream release
  634. * Sun Apr 13 2003 KOBAYASHI R. Taizo <tkoba@vinelinux.org> 3.5p1-0vl2
  635. - rebuild with new tool chain
  636. * Tue Oct 29 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 3.5p1-0vl1
  637. - new upstream release
  638. - merge with upstream spec (drop anonymous mmap patch, suid of ssh)
  639. * Tue Aug 20 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 3.4p1-0vl3
  640. - change some defines in spec files
  641. * Thu Jun 27 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 3.4p1-0vl2
  642. - add patch110 ( 3.4p1 does not include mmap-fallback patch )
  643. * Thu Jun 27 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 3.4p1-0vl1
  644. - new upstream release
  645. - security fix
  646. - drop patch10
  647. * Wed Jun 26 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 3.3p1-0vl2
  648. - add patch from Solar Designer to make privsep work with a 2.2 kernel.
  649. * Sun Jun 23 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 3.3p1-0vl1
  650. - new upstream release
  651. - add {sshd,ssh}_config.5 manpages
  652. - add ssh-keysign
  653. * Sun May 26 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 3.2.3p1-0vl1
  654. - new upstream release
  655. * Sat May 18 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 3.2.2p1-0vl1
  656. - new upstream release
  657. - drop patch1
  658. * Fri Mar 08 2002 Daisuke SUZUKI <daisuke@linux.or.jp> 3.1p1-2vl1
  659. - new upstream release
  660. - merged with rawhide release.
  661. - drop Patch101 (merged in upstream)
  662. * Fri Mar 08 2002 Toru Sagami <sagami@vinelinux.org> 3.0.2p1-2vl2
  663. - seurity patch for off-by-one bug
  664. * Wed Jan 30 2002 KOBAYASHI R. Taizo <tkoba@vinelinux.org> 3.0.2p-2vl1
  665. - merged with Rawhide 3.0.2p1-2
  666. * Sun Dec 02 2001 Toru Sagami <sagami@vinelinux.org>
  667. - updated to 3.0.2p1
  668. * Mon Nov 19 2001 Toru Sagami <sagami@vinelinux.org>
  669. - updated to 3.0.1p1
  670. * Thu Nov 08 2001 Toru Sagami <sagami@vinelinux.org> 3.0p1-0vl0
  671. - updated to 3.0p1
  672. * Sun Sep 30 2001 Daisuke SUZUKI <daisuke@linux.or.jp> 2.9.9p2-0vl2
  673. - add japanese summery and descriptions.
  674. - update x11-askpass 1.2.5
  675. * Sun Sep 30 2001 Daisuke SUZUKI <daisuke@linux.or.jp> 2.9.9p2-0vl1
  676. - update to openssh-2.9.9p2
  677. * Mon Jul 16 2001 MATSUBAYASHI 'Shaolin' Kohji <shaolin@vinelinux.org> 2.5.2p2-0vl3
  678. - rebuilt with openssl-0.9.6b
  679. * Tue Mar 27 2001 Jun Nishii <jun@vinelinux.org> 2.5.2p2-0vl2
  680. - do not Permit RootLogin
  681. * Tue Mar 27 2001 Daisuke SUZUKI <daisuke@linux.or.jp> 2.5.2p2-0vl1
  682. - update to openssh-2.5.2p2
  683. * Wed Mar 21 2001 Daisuke SUZUKI <daisuke@linux.or.jp> 2.5.2p1-0vl1
  684. - update to openssh-2.5.2p1
  685. * Thu Mar 15 2001 Daisuke SUZUKI <daisuke@linux.or.jp> 2.5.1p2-0vl1
  686. - update to openssh-2.5.1p2
  687. * Thu Mar 15 2001 Daisuke SUZUKI <daisuke@linux.or.jp> 2.5.1p2-0vl1
  688. - update to openssh-2.5.1p1
  689. * Wed Feb 21 2001 Daisuke SUZUKI <daisuke@linux.or.jp> 2.5.1p1-0vl1
  690. - update to openssh-2.5.1p1
  691. * Thu Dec 28 2000 Daisuke SUZUKI <daisuke@linux.or.jp> 2.3.0p1-0vl4
  692. - remove suid bit from ssh
  693. * Tue Dec 19 2000 Satoshi MACHINO <machino@vinelinux.org> 2.3.0p1-0vl3
  694. - moved man dir to /usr/share/man
  695. * Wed Dec 06 2000 Satoshi MACHINO <machino@vinelinux.org> 2.3.0p1-0vl2
  696. - fixed askpass's link in ssh-add
  697. - partially used rpmmacros
  698. * Fri Nov 10 2000 Daisuke SUZUKI <daisuke@linux.or.jp> 2.3.0p1-0vl1
  699. - update to 2.3.0p1
  700. - update x11-askpass 1.0.3
  701. * Wed Oct 18 2000 Damien Miller <djm@mindrot.org>
  702. - Merge some of Nalin Dahyabhai <nalin@redhat.com> changes from the
  703. Redhat 7.0 spec file
  704. * Sat Oct 14 2000 Daisuke SUZUKI <daisuke@linux.or.jp> 2.2.0p2-2vl1
  705. - rebuild for Vine Linux
  706. * Tue Sep 05 2000 Damien Miller <djm@mindrot.org>
  707. - Use RPM configure macro
  708. * Tue Aug 08 2000 Damien Miller <djm@mindrot.org>
  709. - Some surgery to sshd.init (generate keys at runtime)
  710. - Cleanup of groups and removal of keygen calls
  711. * Wed Jul 12 2000 Damien Miller <djm@mindrot.org>
  712. - Make building of X11-askpass and gnome-askpass optional
  713. * Mon Jun 12 2000 Damien Miller <djm@mindrot.org>
  714. - Glob manpages to catch compressed files
  715. * Wed Mar 15 2000 Damien Miller <djm@ibs.com.au>
  716. - Updated for new location
  717. - Updated for new gnome-ssh-askpass build
  718. * Sun Dec 26 1999 Damien Miller <djm@mindrot.org>
  719. - Added Jim Knoble's <jmknoble@pobox.com> askpass
  720. * Mon Nov 15 1999 Damien Miller <djm@mindrot.org>
  721. - Split subpackages further based on patch from jim knoble <jmknoble@pobox.com>
  722. * Sat Nov 13 1999 Damien Miller <djm@mindrot.org>
  723. - Added 'Obsoletes' directives
  724. * Tue Nov 09 1999 Damien Miller <djm@ibs.com.au>
  725. - Use make install
  726. - Subpackages
  727. * Mon Nov 08 1999 Damien Miller <djm@ibs.com.au>
  728. - Added links for slogin
  729. - Fixed perms on manpages
  730. * Sat Oct 30 1999 Damien Miller <djm@ibs.com.au>
  731. - Renamed init script
  732. * Fri Oct 29 1999 Damien Miller <djm@ibs.com.au>
  733. - Back to old binary names
  734. * Thu Oct 28 1999 Damien Miller <djm@ibs.com.au>
  735. - Use autoconf
  736. - New binary names
  737. * Wed Oct 27 1999 Damien Miller <djm@ibs.com.au>
  738. - Initial RPMification, based on Jan "Yenya" Kasprzak's <kas@fi.muni.cz> spec.