85af84608f
- a defect in the BSD_AUTH access control handling for
OpenBSD and BSD/OS systems:
Under certain conditions, on systems using YP with netgroups
in the password database, it is possible that sshd does ACL
checks for the requested user name but uses the password
database entry of a different user for authentication. This
means that denied users might authenticate successfully while
permitted users could be locked out (OpenBSD PR 2659).
- login/tty problems on Solaris (bug #245)
- build problems on Cygwin systems
135 lines
3.9 KiB
Makefile
135 lines
3.9 KiB
Makefile
# $NetBSD: Makefile,v 1.71 2002/05/24 04:11:47 itojun Exp $
|
|
|
|
DISTNAME= openssh-3.2.3p1
|
|
PKGNAME= openssh-3.2.3.1
|
|
SVR4_PKGNAME= ossh
|
|
CATEGORIES= security
|
|
MASTER_SITES= ftp://gd.tuwien.ac.at/opsys/OpenBSD/OpenSSH/portable/ \
|
|
ftp://ftp.openssh.com/pub/OpenBSD/OpenSSH/portable/ \
|
|
ftp://ftp.openssh.com/pub/OpenBSD/OpenSSH/portable/old/
|
|
# Don't delete the last entry -- it's there if the pkgsrc version is not
|
|
# up-to-date and the mirrors already removed the old distfile.
|
|
|
|
MAINTAINER= packages@netbsd.org
|
|
HOMEPAGE= http://www.openssh.com/
|
|
COMMENT= Open Source Secure shell client and server (remote login program)
|
|
|
|
CONFLICTS= sftp-[0-9]*
|
|
CONFLICTS+= ssh-[0-9]* ssh6-[0-9]*
|
|
|
|
BUILD_DEPENDS+= perl>=${PERL5_REQD}:../../lang/perl5
|
|
|
|
USE_OPENSSL_VERSION= ${OPENSSL_VERSION_096}
|
|
|
|
CRYPTO= yes
|
|
|
|
# retain the following line, for IPv6-ready pkgsrc webpage
|
|
BUILD_DEFS+= USE_INET6
|
|
#BUILD_DEFS+= KERBEROS
|
|
BUILD_DEFS+= PKG_SYSCONFDIR
|
|
BUILD_DEFS+= SSH_SUID
|
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
INSTALL_TARGET= install-nokeys
|
|
PLIST_SRC= # empty
|
|
MESSAGE_SRC= ${.CURDIR}/MESSAGE
|
|
|
|
SSH_PID_DIR= /var/run # default directory for PID files
|
|
SSH_PID_DIR.SunOS= /etc # Solaris doesn't have a /var/run
|
|
|
|
.if defined(SSH_PID_DIR.${OPSYS})
|
|
SSH_PID_DIR= ${SSH_PID_DIR.${OPSYS}}
|
|
.endif
|
|
|
|
USE_BUILDLINK_ONLY= yes
|
|
GNU_CONFIGURE= yes
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR}
|
|
CONFIGURE_ARGS+= --with-pid-dir=${SSH_PID_DIR}
|
|
CONFIGURE_ARGS+= --with-ssl-dir=${BUILDLINK_DIR}
|
|
CONFIGURE_ARGS+= --with-tcp-wrappers=${BUILDLINK_DIR}
|
|
# necessary until openssh distribution fixes ordering of "-lcrypt -lcrypto"
|
|
CONFIGURE_ARGS+= --with-md5-passwords
|
|
|
|
# XXX: PAM authentication causes memory faults, and I haven't tracked down
|
|
# XXX: why yet. For the moment, disable PAM authentication.
|
|
#
|
|
#.if defined(USE_PAM)
|
|
#.include "../../security/PAM/buildlink.mk"
|
|
#CONFIGURE_ARGS+= --with-pam
|
|
#PLIST_SRC+= ${.CURDIR}/PLIST.pam
|
|
#MESSAGE_SRC+= ${.CURDIR}/MESSAGE.pam
|
|
#.endif
|
|
|
|
# XXX: we have 4 args (4: sslen) to skeychallenge instead of 3
|
|
#.if ${OPSYS} == "NetBSD"
|
|
#CONFIGURE_ARGS+= --with-skey=/usr
|
|
#.endif
|
|
|
|
# XXX: <krb.h>
|
|
#.if defined(KERBEROS)
|
|
#USE_KERBEROS= yes
|
|
#CONFIGURE_ARGS+= --with-kerberos4=/usr
|
|
#.endif
|
|
|
|
# Don't install "ssh" setuid
|
|
.if !defined(SSH_SUID) || ${SSH_SUID} != YES
|
|
CONFIGURE_ARGS+= --disable-suid-ssh
|
|
.endif
|
|
|
|
# The ssh-askpass program is in ${X11BASE}/bin or ${X11PREFIX}/bin depending
|
|
# on if it's part of the X11 distribution, or if it's installed from pkgsrc
|
|
# (security/ssh-askpass).
|
|
#
|
|
.if exists(${X11BASE}/bin/ssh-askpass)
|
|
ASKPASS_PROGRAM= ${X11BASE}/bin/ssh-askpass
|
|
.else
|
|
ASKPASS_PROGRAM= ${X11PREFIX}/bin/ssh-askpass
|
|
.endif
|
|
CONFIGURE_ENV+= ASKPASS_PROGRAM=${ASKPASS_PROGRAM}
|
|
MAKE_ENV+= ASKPASS_PROGRAM=${ASKPASS_PROGRAM}
|
|
|
|
CONFS= ssh_config sshd_config
|
|
SUPPS= moduli
|
|
|
|
.if exists(/dev/urandom)
|
|
MESSAGE_SRC+= ${.CURDIR}/MESSAGE.urandom
|
|
.else
|
|
CONFIGURE_ARGS+= --without-random
|
|
CONFS+= ssh_prng_cmds
|
|
PLIST_SRC+= ${.CURDIR}/PLIST.prng
|
|
.endif
|
|
|
|
EGDIR= ${PREFIX}/share/examples/${PKGBASE}
|
|
CONF_FILES= # empty
|
|
.for FILE in ${CONFS}
|
|
CONF_FILES+= ${EGDIR}/${FILE} ${PKG_SYSCONFDIR}/${FILE}
|
|
.endfor
|
|
SUPPORT_FILES= # empty
|
|
.for FILE in ${SUPPS}
|
|
SUPPORT_FILES+= ${EGDIR}/${FILE} ${PKG_SYSCONFDIR}/${FILE}
|
|
.endfor
|
|
RCD_SCRIPTS= sshd
|
|
|
|
PLIST_SRC+= ${.CURDIR}/PLIST
|
|
FILES_SUBST+= SSH_PID_DIR=${SSH_PID_DIR}
|
|
MESSAGE_SUBST+= EGDIR=${EGDIR}
|
|
|
|
post-build:
|
|
@${SED} ${FILES_SUBST_SED} ${FILESDIR}/sshd.sh > ${WRKDIR}/sshd
|
|
|
|
post-install:
|
|
${INSTALL_DATA_DIR} ${EGDIR}
|
|
cd ${WRKSRC}; for file in ${CONFS} ${SUPPS}; do \
|
|
${INSTALL_DATA} $${file}.out ${EGDIR}/$${file}; \
|
|
done
|
|
#.if defined(USE_PAM)
|
|
# ${INSTALL_DATA} ${WRKSRC}/contrib/sshd.pam.freebsd ${EGDIR}/sshd.pam
|
|
#.endif
|
|
${INSTALL_SCRIPT} ${WRKDIR}/sshd ${PREFIX}/etc/rc.d/sshd
|
|
|
|
.include "../../devel/zlib/buildlink.mk"
|
|
.include "../../security/openssl/buildlink.mk"
|
|
.include "../../security/tcp_wrappers/buildlink.mk"
|
|
.include "../../mk/bsd.pkg.install.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|