Bug 260 - Expanded features in spec file.
Summary: Expanded features in spec file.
Status: CLOSED FIXED
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: Miscellaneous (show other bugs)
Version: -current
Hardware: All Linux
: P2 normal
Assignee: OpenSSH Bugzilla mailing list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-05-30 20:26 AEST by Sebastian Pachuta
Modified: 2004-04-14 12:24 AEST (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sebastian Pachuta 2002-05-30 20:26:44 AEST
This patch resolves compile failure when openssh is compiled against static 
libcrypto under redhat 6.2/7.2.
Also adds some configuration capabilities.

--- openssh.spec.orig   Mon May 20 03:03:15 2002
+++ openssh.spec        Mon May 20 03:03:51 2002
@@ -26,6 +26,12 @@
 # Disable IPv6 (avoids DNS hangs on some glibc versions)
 %define noip6 0

+# Do we want ssh suid root? (1=yes 0=no)
+%define suidssh 0
+
+# Do we want kerberos5 support (1=yes 0=no)
+%define kerberos5 0
+
 # Reserve options to override askpass settings with:
 # rpm -ba|--rebuild --define 'skip_xxx 1'
 %{?skip_x11_askpass:%define no_x11_askpass 1}
@@ -184,15 +190,22 @@
 %if %{noip6}
        --with-ipv4-default \
 %endif
+%if ! %{suidssh}
+       --disable-suid-ssh \
+%endif
 %if %{rescue}
        --without-pam --with-md5-passwords
 %else
+%if %{kerberos5}
        --with-pam --with-kerberos5=/usr/kerberos
+%else
+       --with-pam
+%endif
 %endif


 %if %{static_libcrypto}
-perl -pi -e "s|-lcrypto|%{_libdir}/libcrypto.a|g" Makefile
+perl -pi -e "s|-lcrypto|%{_libdir}/libcrypto.a -ldl|g" Makefile
 %endif

 make
@@ -314,7 +327,11 @@

 %files clients
 %defattr(-,root,root)
+%if %{suidssh}
 %attr(4755,root,root) %{_bindir}/ssh
+%else
+%attr(0755,root,root) %{_bindir}/ssh
+%endif
 %attr(0644,root,root) %{_mandir}/man1/ssh.1*
 %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ssh/ssh_config
 %attr(-,root,root) %{_bindir}/slogin
Comment 1 Damien Miller 2002-06-21 16:43:18 AEST
Mostly applied - the new ssh-keysign makes the suid ssh unnecessary
Comment 2 Damien Miller 2004-04-14 12:24:18 AEST
Mass change of RESOLVED bugs to CLOSED