[Momonga-devel.ja:00492] Re: モモンガ特有のマクロ (Re: Re: kernel-2.4.18-116m での変更(コマンドラインから設定変更))
- From: KOMATSU Shinichiro <koma2@xxxxxxxxxxxxxxxxxxxx>
- Date: Sun, 22 Sep 2002 09:20:42 +0900
小松です。
From: KOMATSU Shinichiro <koma2@xxxxxxxxxxxxxxxxxxxx>
Subject: [Momonga-devel.ja:00432] モモンガ特有のマクロ (Re: Re: kernel-2.4.18-116m での変更(コマンドラインから設定変更))
Date: Fri, Sep 13, 2002 at 04:07:00AM JST
> > 後々のことを考えると、momonga 特有のマクロ(%_ipv6 とか)は
> > 別ファイルで定義した方がいいかもしれませんね。
> と書きましたように、
> この先もいろいろ rpm のマクロをつっこみたいので
> メンテナンス性(メンテナがわざわざ patch 作らないで済む)とか
> 他の distribution に momonga の rpm を持って行く時のことなどを考えて、
> %_ipv6 や %include_specopts などは別ファイルに
> 持って行こうかと考えています。
(中略)
> というように変更して、/usr/lib/rpm/macros.momonga に
> momonga 特有のマクロを置こうかと。
これ、特に反対はないでしょうか？
今日中に反対がなければやってしまいます。
> ちなみに、他に突っこみたい macro としては、
> %NoSource があります。これは、
(以下略)
こっちは、テストしてみたところ問題を発見しました。
%NoSource を使った後、spec 中で define した macro が
undefine されてしまうようです。
例えば、spec 中に
%{!?no_x11_askpass:%define no_x11_askpass 0}
%NoSource 0 ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{over}p%{pver}.tar.gz 459c1d0262e939d6432f193c7a4ba8a8
%if ! %{no_x11_askpass}
%NoSource 1 http://www.ntrnet.net/~jmknoble/software/x11-ssh-askpass/x11-ssh-askpass
-%{aversion}.tar.gz 8f2e41f3f7eaa8543a2440454637f3c3
%endif
とあったとすると、%NoSource 0 の後では
%{no_x11_askpass} が undefine されてしまう(*)ため、
エラーになってしまいます。
(*) %NoSource の前後に %dump や %{echo:%no_x11_askpass}
を挟んで確認しました。
どうも %NoSource() の中で使っている %global が
悪さをしているような気がするのですが、まだ調べてません。
ちなみに、最初の部分、
%{!?no_x11_askpass:%global no_x11_askpass 0}
と %define の代わりに %global を使うようにすれば問題ないようです。
また、
%define no_x11_askpass 0
でも問題はないようなのですが、
これだと command line で --define して上書きすることができないので
イヤなんですよね。。。
ということで、こっちについてはもう少し検討してみます。
＃ 入れるだけ入れて使わなければ問題ないんだけど。。。
それから、%NoSource() だけでなく %NoPatch() も必要なことに気付いたので、
その定義も含めた macro を添付しておきます。
また、サンプルとして openssh-3.4-4m の spec を添付しますので、
遊んでみて下さい。
--
---------------------------------------
東京大学大学院総合文化研究科
広域科学専攻相関基礎科学系
佐々研究室 博士３年
小松 晋一朗
koma2@xxxxxxxxxxxxxxxxxxxx
koma2@xxxxxxxxxxxxxxxxx
http://kamuy.c.u-tokyo.ac.jp/~koma2/
---------------------------------------#------------------------------------------------------------------------
# define %NoSource() and %NoPatch()
#------------------------------------------------------------------------
%NoSource() \
%{expand:%%global __checksum%1 %3} \
%{?__nosource:%{expand:%%global __nosource %__nosource %1}} \
%{!?__nosource:%{expand:%%global __nosource %1}} \
Source%1: %2 \
%{!?_src:NoSource: %1}\
%{nil}
%NoPatch() \
%{expand:%%global __patch_checksum%1 %3} \
%{?__nopatch:%{expand:%%global __nopatch %__nopatch %1}} \
%{!?__nopatch:%{expand:%%global __nopatch %1}} \
Patch%1: %2 \
%{!?_src:NoPatch: %1}\
%{nil}
#------------------------------------------------------------------------
# check checksums defined by %NoSource() and %NoPatch()
#------------------------------------------------------------------------
%_checksum_cmd /usr/bin/md5sum
%_checksum_cmd_args --check
%__spec_prep_checksum \
%{?__nosource:\
set %{expand:%(for n in %__nosource; do \\\
echo -n "%%__checksum$n %%SOURCE$n "; \\\
done) \\\
} \
checksum=$@ \
} \
%{?__nopatch:\
set %{expand:%(for n in %__nopatch; do \\\
echo -n "%%__patch_checksum$n %%PATCH$n "; \\\
done) \\\
} \
patch_checksum=$@ \
} \
set -- $checksum $patch_checksum; \
while [ $# -gt 0 ]; do \
echo "$1 $2" | %{_checksum_cmd} %{_checksum_cmd_args}; \
shift 2; \
done \
%{nil}
%__spec_prep_template #!%{__spec_prep_shell}\
%{__spec_prep_pre}\
%{__spec_prep_checksum}\
%{nil}
# Version of OpenSSH
%define over 3.4
%define pver 1
# Version of ssh-askpass
%define aversion 1.2.4.1
# Do we want to disable building of x11-askpass? (1=yes 0=no)
%define no_x11_askpass 0
# Do we want to disable building of gnome-askpass? (1=yes 0=no)
%define no_gnome_askpass 0
Summary: OpenSSH free Secure Shell (SSH) implementation
Name: openssh
Version: %{over}
Release: 4m
URL: http://www.openssh.com/
%NoSource 0 ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{over}p%{pver}.tar.gz 459c1d0262e939d6432f193c7a4ba8a8
%if ! %{no_x11_askpass}
%NoSource 1 http://www.ntrnet.net/~jmknoble/software/x11-ssh-askpass/x11-ssh-askpass-%{aversion}.tar.gz 8f2e41f3f7eaa8543a2440454637f3c3
%endif
%if ! %{no_gnome_askpass}
Source10: gnome-ssh-askpass.ja.po
#Patch10: gnome-ssh-askpass.c.diff
%endif
License: BSD
Group: Applications/Internet
BuildRoot: %{_tmppath}/%{name}-%{version}-root
Obsoletes: ssh
Provides: ssh
Prereq: openssl >= 0.9.6c
BuildPreReq: perl, openssl-devel >= 0.9.6c, tcp_wrappers, glibc-devel
BuildPreReq: util-linux, rsh, pam-devel
%if ! %{no_gnome_askpass}
BuildPreReq: gnome-libs-devel
%endif
%package clients
Summary: OpenSSH Secure Shell protocol clients
Requires: openssh = %{version}-%{release}
Group: System Environment/Daemons
Obsoletes: ssh-clients, sftp
Provides: ssh-clients, sftp
%package server
Summary: OpenSSH Secure Shell protocol server (sshd)
Group: System Environment/Daemons
Obsoletes: ssh-server
Provides: ssh-server
Requires: openssh = %{version}-%{release}, initscripts >= 4.16
%package askpass
Summary: OpenSSH X11 passphrase dialog
Group: Applications/Internet
Requires: openssh = %{version}-%{release}, openssh-clients = %{version}-%{release}
Obsoletes: ssh-extras
Provides: ssh-extras
%package askpass-gnome
Summary: OpenSSH GNOME passphrase dialog
Group: Applications/Internet
Requires: openssh = %{version}-%{release}, openssh-clients = %{version}-%{release}
Obsoletes: ssh-extras
Provides: ssh-extras
%description
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine. It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.
OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to separate libraries (OpenSSL).
This package includes the core files necessary for both the OpenSSH
client and server. To make this package useful, you should also
install openssh-clients, openssh-server, or both.
%description clients
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine. It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.
OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to separate libraries (OpenSSL).
This package includes the clients necessary to make encrypted connections
to SSH servers.
%description server
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine. It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.
OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to separate libraries (OpenSSL).
This package contains the secure shell daemon. The sshd is the server
part of the secure shell protocol and allows ssh clients to connect to
your host.
%description askpass
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine. It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.
OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to separate libraries (OpenSSL).
This package contains Jim Knoble's <jmknoble@xxxxxxxxxxx> X11 passphrase
dialog.
%description askpass-gnome
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine. It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.
OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to separate libraries (OpenSSL).
This package contains the GNOME passphrase dialog.
%prep
if [ %{version} == "3.4" ]; then
if md5sum %{SOURCE0} | grep -s -v "459c1d0262e939d6432f193c7a4ba8a8" ; then
cat <<EOF >&2
****************************************************************
FATAL ERROR! it seems to be trojaned.
****************************************************************
%{SOURCE0} seems to be trojaned.
So I stopped building %{name}-%{version} urgently.
Read:
http://docs.freebsd.org/cgi/getmsg.cgi?fetch=394609+0+current/freebsd-security
EOF
exit 255
fi
fi
%if ! %{no_x11_askpass}
%setup -q -a 1 -n %{name}-%{over}p%{pver}
%else
%setup -q -n %{name}-%{over}p%{pver}
%endif
%if ! %{no_gnome_askpass}
#%patch10 -p1 -b .gnome-askpass
cp -pf %{SOURCE10} contrib/.
%endif
%build
%ifnarch alpha alphaev5
export CFLAGS="%{optflags}"
%else
export CFLAGS="-O0"
%endif
%configure --sysconfdir=%{_sysconfdir}/ssh \
--libexecdir=%{_libexecdir}/ssh \
--with-tcp-wrappers \
--with-rsh=/usr/bin/rsh \
--without-kerberos4 \
%if ! %{_ipv6}
--with-ipv4-default \
%else
--with-4in6=yes \
%endif
--with-pam
make
%if ! %{no_x11_askpass}
pushd x11-ssh-askpass-%{aversion}
./configure --libexecdir=%{_libexecdir}/ssh --mandir=/usr/X11R6/man
xmkmf
make includes
make
popd
%endif
%if ! %{no_gnome_askpass}
pushd contrib
gcc -O -g `gnome-config --cflags gnome gnomeui gtk` \
gnome-ssh-askpass.c -o gnome-ssh-askpass \
`gnome-config --libs gnome gnomeui gtk`
msgfmt -o gnome-ssh-askpass.mo gnome-ssh-askpass.ja.po
popd
%endif
%install
rm -rf %{buildroot}
make install DESTDIR=%{buildroot}
install -d %{buildroot}/etc/pam.d/
install -d %{buildroot}%{_initscriptdir}
install -d %{buildroot}%{_libexecdir}/ssh
install -m644 contrib/redhat/sshd.pam %{buildroot}/etc/pam.d/sshd
install -m755 contrib/redhat/sshd.init %{buildroot}%{_initscriptdir}/sshd
#install -m755 contrib/make-ssh-known-hosts.pl %{buildroot}%{_bindir}/make-ssh-known-hosts
#install -m644 contrib/make-ssh-known-hosts.1 %{buildroot}%{_mandir}/man1
install -m755 contrib/ssh-copy-id %{buildroot}%{_bindir}
install -m644 contrib/ssh-copy-id.1 %{buildroot}%{_mandir}/man1
%if ! %{no_x11_askpass}
pushd x11-ssh-askpass-%{aversion}
make install DESTDIR=%{buildroot}
make install.man DESTDIR=%{buildroot}
popd
%endif
%if ! %{no_gnome_askpass}
install -d %{buildroot}%{_datadir}/locale/ja/LC_MESSAGES
install -s contrib/gnome-ssh-askpass %{buildroot}%{_libexecdir}/ssh/gnome-ssh-askpass
install -m644 contrib/gnome-ssh-askpass.mo %{buildroot}%{_datadir}/locale/ja/LC_MESSAGES
%endif
mkdir -p %{buildroot}%{_sysconfdir}/sysconfig
%if %{_ipv6}
echo 'OPTIONS=' > %{buildroot}%{_sysconfdir}/sysconfig/sshd
%else
echo 'OPTIONS="-4"' > %{buildroot}%{_sysconfdir}/sysconfig/sshd
%endif
mkdir -p %{buildroot}%{_var}/empty
%clean
rm -rf %{buildroot}
%post server
/sbin/chkconfig --add sshd
if [ ! -f %{_sysconfdir}/ssh/ssh_host_key -o ! -s %{_sysconfdir}/ssh/ssh_host_key ] ; then
%{_bindir}/ssh-keygen -t rsa1 -b 1024 -f %{_sysconfdir}/ssh/ssh_host_key -N '' >&2
fi
if [ ! -f %{_sysconfdir}/ssh/ssh_host_dsa_key -o ! -s %{_sysconfdir}/ssh/ssh_host_dsa_key ] ; then
%{_bindir}/ssh-keygen -t dsa -f %{_sysconfdir}/ssh/ssh_host_dsa_key -N '' >&2
fi
if [ ! -f %{_sysconfdir}/ssh/ssh_host_rsa_key -o ! -s %{_sysconfdir}/ssh/ssh_host_rsa_key ] ; then
%{_bindir}/ssh-keygen -t rsa -f %{_sysconfdir}/ssh/ssh_host_rsa_key -N '' >&2
fi
if [ -r /var/run/sshd.pid ] ; then
%{_initscriptdir}/sshd restart >&2
fi
%preun server
if [ "$1" = 0 ] ; then
%{_initscriptdir}/sshd stop >&2
/sbin/chkconfig --del sshd
fi
%pre server
if ! grep -q '^sshd:' /etc/group; then
/usr/sbin/groupadd -r sshd
fi
if ! grep -q '^sshd:' /etc/passwd; then
/usr/sbin/useradd -M -r -s /bin/false -g sshd sshd || :
fi
%postun server
if [ $1 = 0 ]; then
if [ `grep sshd /etc/passwd | wc -l` = 1 ]; then
/usr/sbin/userdel sshd
fi
if [ `grep sshd /etc/group | wc -l` = 1 ]; then
/usr/sbin/groupdel sshd
fi
fi
%files
%defattr(-,root,root)
%doc CREDITS ChangeLog LICENCE OVERVIEW INSTALL
%doc README* RFC.nroff TODO WARNING.RNG
%attr(0755,root,root) %{_bindir}/scp
%attr(0755,root,root) %{_bindir}/ssh-keygen
%attr(0755,root,root) %{_bindir}/ssh-keyscan
%attr(0644,root,root) %{_mandir}/man1/scp.1*
%attr(0644,root,root) %{_mandir}/man1/ssh-keygen.1*
%attr(0644,root,root) %{_mandir}/man1/ssh-keyscan.1*
%attr(0755,root,root) %dir %{_sysconfdir}/ssh
%attr(0755,root,root) %dir %{_libexecdir}/ssh
%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ssh/moduli
%files clients
%defattr(-,root,root)
%attr(0755,root,root) %{_bindir}/ssh
%attr(0755,root,root) %{_bindir}/ssh-agent
%attr(0755,root,root) %{_bindir}/ssh-add
%attr(0755,root,root) %{_bindir}/sftp
%attr(0644,root,root) %{_mandir}/man1/ssh.1*
%attr(0644,root,root) %{_mandir}/man1/ssh-agent.1*
%attr(0644,root,root) %{_mandir}/man1/ssh-add.1*
%attr(0644,root,root) %{_mandir}/man1/sftp.1*
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ssh/ssh_config
%attr(-,root,root) %{_bindir}/slogin
%attr(-,root,root) %{_mandir}/man1/slogin.1*
%attr(-,root,root) %{_bindir}/ssh-copy-id
%attr(-,root,root) %{_mandir}/man1/ssh-copy-id.1*
%files server
%defattr(-,root,root)
%attr(0755,root,root) %{_sbindir}/sshd
%attr(0755,root,root) %{_libexecdir}/ssh/sftp-server
%attr(0644,root,root) %{_mandir}/man5/sshd_config.5*
%attr(0644,root,root) %{_mandir}/man8/sshd.8*
%attr(0644,root,root) %{_mandir}/man8/sftp-server.8*
%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ssh/sshd_config
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/sshd
%attr(0644,root,root) %config(noreplace) /etc/pam.d/sshd
%attr(0755,root,root) %config %{_initscriptdir}/sshd
%attr(0755,root,sys) %{_var}/empty
%if ! %{no_x11_askpass}
%files askpass
%defattr(-,root,root)
%doc x11-ssh-askpass-%{aversion}/README
%doc x11-ssh-askpass-%{aversion}/ChangeLog
%doc x11-ssh-askpass-%{aversion}/TODO
%doc x11-ssh-askpass-%{aversion}/SshAskpass-*.ad
%attr(0755,root,root) %{_libexecdir}/ssh/ssh-askpass
%attr(0755,root,root) %{_libexecdir}/ssh/x11-ssh-askpass
%{_prefix}/X11R6/lib/X11/app-defaults/SshAskpass
%{_prefix}/X11R6/man/man1/ssh-askpass.1x*
%{_prefix}/X11R6/man/man1/x11-ssh-askpass.1x*
%endif
%if ! %{no_gnome_askpass}
%files askpass-gnome
%defattr(-,root,root)
%attr(0755,root,root) %{_libexecdir}/ssh/gnome-ssh-askpass
%{_datadir}/locale/ja/LC_MESSAGES/gnome-ssh-askpass.mo
%endif
%changelog
* Thu Aug 1 2002 HOSONO Hidetomo <h@xxxxxxxx>
- (3.4-4m)
- correct some wrong spelling of trojan(ed)
* Thu Aug 1 2002 HOSONO Hidetomo <h@xxxxxxxx>
- (3.4-3m)
- stop building in %prep when trojaned openssh-3.4p1.tar.gz is find
* Tue Jun 27 2002 Masahiro Takahata <takahata@xxxxxxxxx>
- (3.4-2k)
- upgrade to 3.4
* Thu Jun 25 2002 Junichiro Kita <kita@xxxxxxxxxxxxxxx>
- (3.3-4k)
- specify package name for papre and postun
- add sshd_config.5
* Thu Jun 25 2002 Junichiro Kita <kita@xxxxxxxxxxxxxxx>
- (3.3-2k)
- update to 3.3p1
- useradd/groupadd sshd for privilege separation
* Thu May 23 2002 Tsutomu Yasuda <tom@xxxxxxxxxxx>
- (3.2.3-2k)
update to 3.2.3p1
* Fri May 17 2002 YAMAZAKI Makoto <zaki@xxxxxxxxxxx>
- (3.2.2p1-6k)
- add --with-4in6=yes configure option if _ipv6 is defined as 1
* Fri May 17 2002 HOSONO Hidetomo <h@xxxxxxxxxxx>
- (3.2.2p1-4k)
- change Prereq and BuildPreReq(openssl-0.9.6c or later).
* Fri May 17 2002 WATABE Toyokazu <toy2@xxxxxxxxxxx>
- (3.2.2p1-2k)
- update to 3.2.2p1 to fix several security ploblems.
see http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=102158874317836&w=2
- move scp to openssh package.
* Wed May 1 2002 WATABE Toyokazu <toy2@xxxxxxxxxxx>
- (3.1p1-6k)
- apply a patch.
see http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=101982330707988&w=2
* Fri Apr 12 2002 Yasuhiro Takabayashi <kourin@xxxxxxxxxxx>
- (3.1p1-4k)
- fix spec about rsa1 problem.
* Fri Mar 8 2002 Tsutomu Yasuda <tom@xxxxxxxxxxx>
- (3.1p1-2k)
- update to 3.1p1
* Tue Feb 19 2002 Shingo Akagaki <dora@xxxxxxxxxxx>
- (3.0.2p1-8k)
- Obsoletes: sftp
* Sun Feb 17 2002 WATABE Toyokazu <toy2@xxxxxxxxxxx>
- (3.0.2p1-6k)
- be available sftp and its manual.
* Sun Dec 9 2001 Toru Hoshina <t@xxxxxxxxxxx>
- (3.0.2p1-4k)
- applied init patch.
- See. [Kondara-devel.ja:06055]
* Tue Dec 4 2001 Toru Hoshina <t@xxxxxxxxxxx>
- (3.0.2p1-2k)
- update to 3.0.2p1
- suma-so.
* Tue Nov 20 2001 Tsutomu Yasuda <tom@xxxxxxxxxxx>
- (3.0.1p1-2k)
update to 3.0.1p1
* Mon Nov 12 2001 Tsutomu Yasuda <tom@xxxxxxxxxxx>
- (3.0p1-2k)
update to 3.0p1
* Thu Oct 18 2001 Toru Hoshina <t@xxxxxxxxxxx>
- (2.9.9p2-4k)
- rebuild against gettext 0.10.40.
* Sun Sep 30 2001 MATSUDA< Daiki <dyky@xxxxxxxxxx>
- (2.9.9p2-2k)
- update to 2.9.9p2 for security fix (http://www.securityfocus.com/bid/3369)
- update x11-ask-pass to 1.2.4.1
- rename /etc/ssh/primes to /etc/ssh/moduli for fixing original source
* Mon Sep 24 2001 Toru Hoshina <t@xxxxxxxxxxx>
- (2.9p2-16k)
- suid of /usr/bin/ssh is turned off.
- scp should be in ssh-clients.
* Fri Sep 21 2001 Tsutomu Yasuda <tom@xxxxxxxxxxxxxxxxxxxx>
- (2.9p2-14k)
fix spec
* Sun Sep 9 2001 Toru Hoshina <t@xxxxxxxxxxx>
- (2.9p2-8k)
- rebuild against XFree 4.1.0, applied x11-askpass-1.2.2-xf41.patch, however
it might be wrong for X403 environment.
* Tue Aug 7 2001 Toru Hoshina <toru@xxxxxxxxxx>
- (2.9p2-6k)
- add alphaev5 support.
* Sun Jul 16 2001 MATSUDA, Daiki <dyky@xxxxxxxxxx>
- (2.9p2-4k)
- update to 2.9p2 for openssl security fix
- so, modified add version '0.9.6b' to openssl required tag
* Fri Jun 22 2001 KOMATSU Shinichiro <koma2@xxxxxxxxxxxxxxxxxxxx>
- (2.9p2-3k)
- update to 2.9p2
- delete openssh-2.9-cookies.patch
since it is already imported into source
* Sat Jun 16 2001 KOMATSU Shinichiro <koma2@xxxxxxxxxxxxxxxxxxxx>
- (2.9p1-9k)
- added openssh-2.9-cookies.patch (from FreeBSD's openssh-portable port)
this patch fixed the problem of
http://www.securityfocus.com/archive/1/188450
- BuildPreReq: pam => pam-devel
* Thu May 3 2001 Tsutomu Yasuda <tom@xxxxxxxxxxxxxxxxxxxx>
- (2.9p1-4k)
added %{_sysconfdir}/sysconfig/sshd
* Thu May 3 2001 Tsutomu Yasuda <tom@xxxxxxxxxxxxxxxxxxxx>
- (2.9p1-2k)
openssh update to 2.9p1
x11-askpass update to 1.2.2
* Thu Apr 19 2001 Kenichi Matsubara <m@xxxxxxxxxxx>
- (2.5.2p2-10k)
- remove sftp,sftp.man.
* Sat Apr 14 2001 Toru Hoshina <toru@xxxxxxxxxx>
- (2.5.2p2-8k)
- rebuild against openssl 0.9.6.
* Sat Mar 24 2001 KOMATSU Shinichiro <koma2@xxxxxxxxxxxxxxxxxxxx>
- (2.5.2p2-3k)
- update to 2.5.2p2
* Thu Mar 22 2001 Toru Hoshina <toru@xxxxxxxxxx>
- (2.5.2p1-7k)
- support gtk+1-1.2.9
* Thu Mar 22 2001 KOMATSU Shinichiro <koma2@xxxxxxxxxxxxxxxxxxxx>
- (2.5.2p1-5k)
- when creating ssh_host_dsa_key, use "-t dsa" instead of "-d".
- create ssh_host_rsa_key (RSA key for protocol ver.2) on %%post.
- uncommentout "HostKey /etc/ssh/ssh_host_rsa_key"
* Wed Mar 20 2001 TABUCHI Takaaki <tab@xxxxxxxxxxx>
- (2.5.2p1-3k)
- update to 2.5.2p1
- change openssh-kondara.patch adapt for openssh-2.5.2p1.
(and comment out "HostKey /etc/ssh/ssh_host_rsa_key".
If you want to use this function, maybe you need to
add exec ssh-keygen at post server section in this spec file.)
- comment out make-ssh-known-hosts at install,
because this file is deleted in openssh tarball.
(This file is not listed in files section. miss?)
- add ssh-copy-id, ssh-copy-id.1* in clients files section
* Thu Mar 1 2001 KOMATSU Shinichiro <koma2@xxxxxxxxxxxxxxxxxxxx>
- (2.5.1p2-3k)
- update to 2.5.1p2
* Wed Feb 28 2001 TABUCHI Takaaki <tab@xxxxxxxxxxx>
- (2.5.1p1-5k)
- add --with-pam at configure
- comment out ssh-keyscan* at files for clients package
* Mon Feb 23 2001 TABUCHI Takaaki <tab@xxxxxxxxxxx>
- (2.5.1p1-3k)
- update to 2.5.1p1
- comment out patch1(openssh-init.patch)
- remove README.Ylonen, COPYING.Ylonen
- update x11-ssh-askpass for 1.2.0
- add /etc/ssh/primes at files
- fix missed directory /etc/ssh/primes
- change permission 600 to 644 /etc/pam.d/sshd
* Mon Feb 05 2001 WATABE Toyokazu <toy2@xxxxxxxxxxx>
- (2.3.0p1-13k)
- use _sysconfdir macro.
- add make-ssh-known-hosts and ssh-copy-id.
* Sat Feb 3 2001 MATSUDA, Daiki <dyky@xxxxxxxxxx>
- (2.3.0p1-11k)
- rebuild againt rpm-3.0.5-39k
* Tue Nov 28 2000 Toru Hoshina <toru@xxxxxxxxxx>
- (2.3.0p1-7k)
- use _initscriptdir macro to keep backword compatibility.
* Thu Nov 16 2000 Toyokazu WATABE <toy2@xxxxxxxxxxx>
- (2.3.0p1-5k)
- update gnome-ssh-askpass.* made by h@xxxxxxxxxxxx
* Wed Nov 15 2000 Toyokazu WATABE <toy2@xxxxxxxxxxx>
- (2.3.0p1-3k)
- update x11-ssh-askpass for 1.1.1
- modified install of x11-ssh-askpass.
* Tue Nov 07 2000 Toyokazu WATABE <toy2@xxxxxxxxxxx>
- (2.3.0p1-2k)
- update x11-ssh-askpass for 1.1.0
- add openssh-init.patch
* Tue Nov 07 2000 Toyokazu WATABE <toy2@xxxxxxxxxxx>
- (2.3.0p1-1k)
- update openssh for 2.3.0p1
- update openssh-kondara.patch
- remove sshd.init
* Mon Oct 30 2000 Toyokazu WATABE <toy2@xxxxxxxxxxx>
- (2.2.0p1-4k)
- update ssh-askpass for 1.0.3
* Mon Oct 16 2000 Toyokazu WATABE <toy2@xxxxxxxxxxx>
- (2.2.0p1-2k)
- update ssh-askpass for 1.0.2
* Fri Sep 15 2000 Toyokazu WATABE <toy2@xxxxxxxxxxx>
- (2.2.0p1-1k)
- Adopt to FHS-2.1
* Sat Sep 02 2000 Toyokazu WATABE <toy2@xxxxxxxxxxx>
- (2.2.0p1-0k)
- add openssh-2.2.0p1-kondara.patch
* Tue Aug 08 2000 Damien Miller <djm@xxxxxxxxxxx>
- Some surgery to sshd.init (generate keys at runtime)
- Cleanup of groups and removal of keygen calls
* Wed Jul 12 2000 Damien Miller <djm@xxxxxxxxxxx>
- Make building of X11-askpass and gnome-askpass optional
* Thu Jun 15 2000 Toyokazu Watabe <toy2@xxxxxxxxxxx>
- add openssh-2.1.1p1-kondara.patch
fix config files and these pathes.
* Mon Jun 12 2000 Damien Miller <djm@xxxxxxxxxxx>
- Glob manpages to catch compressed files
* Sat Jun 10 2000 Toyokazu Watabe <toy2@xxxxxxxxxxx>
- update for 2.1.1p1
* Mon May 29 2000 Hidetomo Hosono <h@xxxxxxxxxxx>
- patched for contrib/gnome-ssh-askpass.c
because of the problem with grabbing X server and command arguments dealing.
(very quick and ad-hoc hack)
* Wed May 10 2000 Toyokazu Watabe <toy2@xxxxxxxxxxx>
- update for 2.1.0
* Sun Mar 26 2000 Tenkou N. Hattori <tnh@xxxxxxxxxxx>
- be a NoSrc :-P
* Wed Mar 15 2000 Damien Miller <djm@xxxxxxxxxx>
- Updated for new location
- Updated for new gnome-ssh-askpass build
* Sun Dec 26 1999 Damien Miller <djm@xxxxxxxxxxx>
- Added Jim Knoble's <jmknoble@xxxxxxxxx> askpass
* Mon Nov 15 1999 Damien Miller <djm@xxxxxxxxxxx>
- Split subpackages further based on patch from jim knoble <jmknoble@xxxxxxxxx>
* Sat Nov 13 1999 Damien Miller <djm@xxxxxxxxxxx>
- Added 'Obsoletes' directives
* Tue Nov 09 1999 Damien Miller <djm@xxxxxxxxxx>
- Use make install
- Subpackages
* Mon Nov 08 1999 Damien Miller <djm@xxxxxxxxxx>
- Added links for slogin
- Fixed perms on manpages
* Sat Oct 30 1999 Damien Miller <djm@xxxxxxxxxx>
- Renamed init script
* Fri Oct 29 1999 Damien Miller <djm@xxxxxxxxxx>
- Back to old binary names
* Thu Oct 28 1999 Damien Miller <djm@xxxxxxxxxx>
- Use autoconf
- New binary names
* Wed Oct 27 1999 Damien Miller <djm@xxxxxxxxxx>
- Initial RPMification, based on Jan "Yenya" Kasprzak's <kas@xxxxxxxxxx> spec.