PAM & PAM-related packages renewed

server/openssh/actions.py

@@ -16,30 +16,30 @@ def setup():
     shelltools.export("LDFLAGS","%s -pie" % get.LDFLAGS())
 
     #pisitools.dosed("pathnames.h", "/usr/X11R6/bin/xauth", r"/usr/bin/xauth")
-    #pisitools.dosed("sshd_config", "(?m)^(^#UsePAM ).*", r"UsePAM yes")
-    #pisitools.dosed("sshd_config", "(?m)^(^#PasswordAuthentication ).*", r"PasswordAuthentication no")
-    #pisitools.dosed("sshd_config", "(?m)^(^#X11Forwarding ).*", r"X11Forwarding yes")
-    #pisitools.dosed("sshd_config", "(?m)^(^#UseDNS ).*", r"UseDNS no")
-    #pisitools.dosed("sshd_config", "(?m)^(^#PermitRootLogin ).*", r"PermitRootLogin no")
+    pisitools.dosed("sshd_config", "(?m)^(^#UsePAM ).*", r"UsePAM yes")
+    pisitools.dosed("sshd_config", "(?m)^(^#PasswordAuthentication ).*", r"PasswordAuthentication no")
+    pisitools.dosed("sshd_config", "(?m)^(^#X11Forwarding ).*", r"X11Forwarding yes")
+    pisitools.dosed("sshd_config", "(?m)^(^#UseDNS ).*", r"UseDNS no")
+    pisitools.dosed("sshd_config", "(?m)^(^#PermitRootLogin ).*", r"PermitRootLogin no")
 
     autotools.autoreconf("-fi")
 
     # Kerberos support is a must, libedit is optional
     # Update configure parameters when both are ready
-    autotools.configure("--sysconfdir=/etc/ssh \
-                         --libexecdir=/usr/libexec/openssh \
-                         --datadir=/usr/share/openssh \
-                         --disable-strip \
+    autotools.configure("--prefix=/usr \
+                         --sysconfdir=/etc/ssh \
+                         --datadir=/usr/share/sshd \
                          --with-pam \
                          --with-libedit \
                          --with-kerberos5 \
-                         --with-tcp-wrappers \
                          --with-md5-passwords \
                          --with-ipaddr-display \
                          --with-privsep-user=sshd \
                          --with-privsep-path=/var/empty \
+                         --with-default-path=/usr/bin \
                          --without-zlib-version-check \
-                         --without-ssl-engine")
+                         --with-superuser-path=/sbin:/bin:/usr/sbin:/usr/bin \
+                         --with-pid-dir=/run")
 
 def build():
     autotools.make()
@@ -47,17 +47,20 @@ def build():
 def install():
     autotools.rawInstall("DESTDIR=%s" % get.installDIR())
 
+    # PAM configuration
+    pisitools.dodir("/etc/pam.d")
+    shelltools.system("sed 's@d/login@d/sshd@g' /etc/pam.d/login > " + get.installDIR() + "/etc/pam.d/sshd")
+    shelltools.system("chmod 644 " + get.installDIR() + "/etc/pam.d/sshd")
+
     # fixes #10992
     pisitools.dobin("contrib/ssh-copy-id")
     pisitools.doman("contrib/ssh-copy-id.1")
-    
+
     # an script in contrib
     pisitools.dobin("contrib/findssl.sh")
-    
+
     shelltools.chmod("%s/etc/ssh/sshd_config" % get.installDIR(), 0600)
     # special request by merensan
     shelltools.echo("%s/etc/ssh/ssh_config" % get.installDIR(), "ServerAliveInterval 5")
 
-    pisitools.dodir("/var/empty/sshd")
-
     pisitools.dodoc("ChangeLog", "CREDITS", "OVERVIEW", "README*", "TODO", "sshd_config")

server/openssh/pspec.xml

@@ -13,7 +13,7 @@
         <IsA>service</IsA>
         <Summary>Port of OpenBSD's free SSH release</Summary>
         <Description>OpenSSH is a FREE version of the SSH connectivity tools that technical users of the Internet rely on. Users of telnet, rlogin, and ftp may not realize that their password is transmitted across the Internet unencrypted, but it is. OpenSSH encrypts all traffic (including passwords) to effectively eliminate eavesdropping, connection hijacking, and other attacks.</Description>
-        <Archive sha1sum="c44b96094869f177735ae053d92bd5fcab1319de" type="targz">http://ftp.icm.edu.pl/pub/OpenBSD/OpenSSH/portable/openssh-8.1p1.tar.gz</Archive>
+        <Archive sha1sum="8f9f0c94317baeb97747d6258f3997b4542762c0" type="targz">https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.6p1.tar.gz</Archive>
         <BuildDependencies>
             <Dependency>libedit-devel</Dependency>
             <Dependency>zlib-devel</Dependency>
@@ -50,7 +50,7 @@
             <Path fileType="doc">/usr/share/doc</Path>
         </Files>
         <AdditionalFiles>
-           <AdditionalFile owner="root" permission="0644" target="/etc/pam.d/sshd">sshd.pam</AdditionalFile>
+           <!--AdditionalFile owner="root" permission="0644" target="/etc/pam.d/sshd">sshd.pam</AdditionalFile-->
         </AdditionalFiles>
         <Provides>
             <COMAR script="service.py">System.Service</COMAR>
@@ -58,6 +58,13 @@
     </Package>
 
     <History>
+        <Update release="6">
+            <Date>2021-06-05</Date>
+            <Version>8.6_p1</Version>
+            <Comment>Version bump.</Comment>
+            <Name>Berk Çakar</Name>
+            <Email>berk2238@hotmail.com</Email>
+        </Update>
         <Update release="5">
             <Date>2020-01-21</Date>
             <Version>8.1_p1</Version>