Главная   Изменения   Спек   Патчи   Sources   Загрузить   Gear   Bugs and FR  Repocop 

%define ROOT /var/empty
%def_with pam_userpass

Name: openssh
Version: 3.6.1p2
Release: alt6

Summary: OpenSSH free Secure Shell (SSH) implementation
License: BSD
Group: Networking/Remote access
Url: http://www.openssh.com/portable.html

Source: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/%name-%version.tar.bz2

Source1: ssh-copy-id.tar.bz2
Source2: http://www.openssh.com/faq.html

Source3: ssh-askpass.sh
Source4: ssh-askpass.csh
Source5: sftp.control
Source6: sshd.pamd
Source7: sshd.init

Source9: rescp

Source10: ssh-agent.sh

# CVS
Patch1: %name-3.6.1p2-cvs-20030515-argv.patch
Patch2: %name-3.6.1p2-cvs-20030603-UseDNS.patch
Patch3: %name-3.6.1p2-cvs-20030915-scp.patch
Patch4: %name-3.6.1p2-cvs-20030916-buffer-channels-realloc.patch
Patch5: %name-3.6.1p2-cvs-20040408-UT_LINESIZE.patch
Patch6: %name-3.6.1p2-cvs-20040401-scp-CAN-2004-0175.patch

# Owl
Patch100: %name-3.6.1p1-owl-warnings.patch
Patch101: %name-3.6.1p1-owl-hide-unknown.patch
Patch102: %name-3.6.1p2-owl-always-auth.patch
Patch103: %name-3.6.1p1-owl-alt-pam_userpass.patch
Patch104: %name-3.6.1p1-owl-fatal_cleanups.patch
Patch105: %name-3.6.1p1-owl-drop-groups.patch
Patch106: %name-3.6.1p1-owl-logging.patch
Patch107: %name-3.6.1p1-owl-mm.patch
Patch108: %name-3.6.1p1-owl-password-changing.patch
Patch109: %name-3.6.1p1-owl-openssl-version-check.patch
Patch110: %name-3.6.1p1-owl-scp-sftp-stalltime.patch
Patch111: %name-3.6.1p1-owl-ssh-agent-dumpable.patch
Patch112: %name-3.6.1p2-owl-realloc.patch

# ALT
Patch201: %name-3.6.1p1-alt-mm.patch
Patch202: %name-3.6.1p1-alt-cleanup-client-libs.patch
Patch203: %name-3.6.1p1-alt-socketcred.patch
Patch204: %name-3.6.1p1-alt-auth_parse_options.patch
Patch205: %name-3.6.1p1-alt-ssh-add.patch
Patch206: %name-3.6.1p1-alt-ssh-agent.patch
Patch207: %name-3.6.1p1-alt-channels-debug.patch
Patch208: %name-3.6.1p1-alt-authorized_keys_system_file.patch
Patch209: %name-3.6.1p1-alt-ssh_version.patch
Patch210: %name-3.6.1p1-alt-trans_inter.patch
Patch211: %name-3.6.1p1-alt-slogin-makefile.patch
Patch212: %name-3.6.1p1-alt-defaults.patch
Patch213: %name-3.4p1-kevin-resolver.patch

%define _libexecdir %_libdir/%name
%define _pamdir /etc/pam.d

Obsoletes: ssh

# Automatically added by buildreq on Sun Nov 10 2002
BuildRequires: groff-base libpam-devel libssl-devel libwrap-devel pam_userpass-devel zlib-devel

%package clients
Summary: OpenSSH Secure Shell protocol clients
Group: Networking/Remote access
PreReq: shadow-utils
Requires: %name = %version-%release
Obsoletes: ssh-clients, sftp

%package keysign
Summary: OpenSSH helper program for hostbased authentication
Group: Networking/Remote access
Requires: %name-clients = %version-%release

%package server
Summary: OpenSSH Secure Shell protocol daemon
Group: System/Servers
PreReq: %name = %version-%release, chkconfig, control, coreutils, shadow-utils
Obsoletes: ssh-server

%package askpass-common
Summary: OpenSSH common passphrase dialog infrastructure
Group: Networking/Remote access
Requires: %name = %version-%release
Provides: %_libexecdir
Obsoletes: ssh-extras, ssh-askpass, %name-askpass

%description
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine.  It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network.  X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to seperate libraries (OpenSSL).

This package includes the core files necessary for both the OpenSSH
client and server.  To make this package useful, you should also
install %name-clients, %name-server, or both.

%description clients
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine.  It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network.  X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to seperate libraries (OpenSSL).

This package includes the clients necessary to make encrypted connections
to SSH servers.

%description keysign
ssh-keysign is used by ssh(1) to access the local host keys and generate
the digital signature required during hostbased authentication with SSH
protocol version 2.  ssh-keysign is not intended to be invoked by the
user, but from ssh(1).  See ssh(1) and sshd(8) for more information about
hostbased authentication.

%description server
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine.  It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network.  X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to seperate libraries (OpenSSL).

This package contains the secure shell daemon.  The sshd is the server
part of the secure shell protocol and allows ssh clients to connect to
your host.

%description askpass-common
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine.  It is intended to replace
rlogin and rsh, and provide secure encrypted communications between
two untrusted hosts over an insecure network.  X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it
up to date in terms of security and features, as well as removing all
patented algorithms to seperate libraries (OpenSSL).

This package contains OpenSSH passphrase dialog infrastructure.
These dialogs are intended to be called from the ssh-add program and
not invoked directly.

%prep
%setup -q -a1
install -p -m644 $RPM_SOURCE_DIR/faq.html contrib/faq.html

%patch1 -p0
%patch2 -p1
%patch3 -p0
%patch4 -p0
%patch5 -p1
%patch6 -p1

%patch100 -p1
%patch101 -p1
%patch102 -p1
%patch103 -p1
%patch104 -p1
%patch105 -p1
%patch106 -p1
%patch107 -p1
%patch108 -p1
%patch109 -p1
%patch110 -p1
%patch111 -p1
%patch112 -p1

%patch201 -p1
%patch202 -p1
%patch203 -p1
%patch204 -p1
%patch205 -p1
%patch206 -p1
%patch207 -p1
%patch208 -p1
%patch209 -p1
%patch210 -p1
%patch211 -p1
%patch212 -p1
%patch213 -p1

find -type f -name \*.orig -print -delete

%build
export ac_cv_path_PROG_LASTLOG=/usr/bin/lastlog
export ac_cv_path_LOGIN_PROGRAM_FALLBACK=/bin/login
export ac_cv_path_NROFF=/usr/bin/nroff
export ac_cv_path_xauth_path=/usr/X11R6/bin/xauth
%configure \
--sysconfdir=%_sysconfdir/%name \
--with-pam \
--with-tcp-wrappers \
--with-ipv4-default \
--with-ipaddr-display \
--with-rsh=/usr/bin/rsh \
--with-default-path=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin \
--with-privsep-path=%ROOT \
--with-privsep-user=sshd \
#

%__subst 's/ -ldl//' Makefile
%__subst 's/ -lnsl//' Makefile
%__subst 's/^\(LIBPAM=.*\)/\1 -lpam_misc -lpam_userpass/g' Makefile

%make_build

%install
%make_install install DESTDIR=$RPM_BUILD_ROOT

%__mkdir_p $RPM_BUILD_ROOT{%_libexecdir,%_sysconfdir{,/X11}/profile.d}
%__mkdir_p $RPM_BUILD_ROOT%_sysconfdir/%name/authorized_keys{,2}
%__install -pD -m600 $RPM_SOURCE_DIR/sshd.pamd \
$RPM_BUILD_ROOT%_pamdir/sshd
%__install -pD -m755 $RPM_SOURCE_DIR/sshd.init \
$RPM_BUILD_ROOT%_initdir/sshd
%__install -p -m755 $RPM_SOURCE_DIR/rescp \
$RPM_BUILD_ROOT%_bindir/
%__install -p -m755 $RPM_SOURCE_DIR/ssh-agent.sh \
$RPM_BUILD_ROOT%_sysconfdir/X11/profile.d/
%__install -pD -m755 $RPM_SOURCE_DIR/sftp.control \
       $RPM_BUILD_ROOT%_sysconfdir/control.d/facilities/sftp

%__install -p -m755 contrib/ssh-copy-id $RPM_BUILD_ROOT%_bindir/
%__install -p -m644 contrib/ssh-copy-id.1 $RPM_BUILD_ROOT%_man1dir/

%__chmod 711 $RPM_BUILD_ROOT%_sbindir/*

%__install -p -m755 $RPM_SOURCE_DIR/ssh-askpass.{sh,csh} \
$RPM_BUILD_ROOT%_sysconfdir/profile.d/

%__bzip2 -9 ChangeLog ||:

#mmap fallback
%__mkdir_p -m711 $RPM_BUILD_ROOT/var/run/sshd

%pre clients
/usr/sbin/groupadd -r -f sshagent

%pre server
/usr/sbin/groupadd -r -f sshd
/usr/sbin/useradd -r -g sshd -d / -s /dev/null -n sshd >/dev/null 2>&1 ||:
if [ $1 -ge 2 ]; then
/usr/sbin/control-dump sftp
fi

%post server
if [ $1 -ge 2 ]; then
/usr/sbin/control-restore sftp
/sbin/service sshd condreload ||:
else
/sbin/chkconfig --add sshd ||:
fi

%preun server
if [ $1 = 0 ]; then
/sbin/chkconfig --del sshd ||:
fi

%triggerpostun server -- openssh < 0:3.0.2p1-alt3
f=%_sysconfdir/%name/moduli
if [ ! -f "$f" ]; then
if [ -f "$f".rpmsave ]; then
%__cp -pf "$f".rpmsave "$f"
elif [ -f "$f".rpmnew ]; then
%__cp -pf "$f".rpmnew "$f"
fi
fi

%files
%attr(751,root,root) %dir %_sysconfdir/%name
%_bindir/scp
%_bindir/ssh-keygen
%_man1dir/scp.*
%_man1dir/ssh-keygen.*
%doc ChangeLog* CREDITS INSTALL LICENCE README* RFC.nroff TODO WARNING.RNG contrib/faq.html

%files clients
%attr(751,root,root) %dir %_sysconfdir/%name
%config(noreplace) %_sysconfdir/%name/ssh_config
%config(noreplace) %_sysconfdir/X11/profile.d/*
%_bindir/rescp
%_bindir/sftp
%_bindir/slogin
%_bindir/ssh
%_bindir/ssh-add
%attr(2711,root,sshagent) %_bindir/ssh-agent
%_bindir/ssh-copy-id
%_bindir/ssh-keyscan
%_man1dir/sftp.*
%_man1dir/slogin.*
%_man1dir/ssh.*
%_man1dir/ssh-add.*
%_man1dir/ssh-agent.*
%_man1dir/ssh-copy-id.*
%_man1dir/ssh-keyscan.*
%_man5dir/ssh_config.*

%files keysign
%attr(751,root,root) %dir %_libexecdir
%_libexecdir/ssh-keysign
%_man8dir/ssh-keysign.*

%files server
%attr(755,root,root) %_sysconfdir/control.d/facilities/sftp
%attr(751,root,root) %dir %_sysconfdir/%name
%attr(600,root,root) %config %_sysconfdir/%name/moduli
%attr(600,root,root) %config(noreplace) %_sysconfdir/%name/sshd_config
%attr(600,root,root) %config(noreplace) %_pamdir/sshd
%attr(755,root,root) %config %_initdir/sshd
%attr(751,root,root) %dir %_sysconfdir/%name/authorized_keys*
%_sbindir/*
%attr(751,root,root) %dir %_libexecdir
%_libexecdir/sftp-server
%_man5dir/sshd_config.*
%_man8dir/sshd.*
%_man8dir/sftp-server.*
#mmap fallback
/var/run/sshd

%files askpass-common
%_sysconfdir/profile.d/ssh-askpass.*
%attr(751,root,root) %dir %_libexecdir

%changelog
…
Полный changelog можно просмотреть здесь