summaryrefslogtreecommitdiffstats
path: root/meta/recipes-connectivity/openssh
Commit message (Collapse)AuthorAgeFilesLines
* openssh: upgrade to 6.5p1Paul Eggleton2014-03-0211-2/+2
| | | | | | | (From OE-Core rev: ea86d4ccc56f7933f988f0b24f09c5b6888d51ed) Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* autotools-brokensep: Mark recipes with broken separate build dir supportRichard Purdie2014-02-281-1/+1
| | | | | | | | | | | | This patch goes through the OE-Core recipes and marks those which use autotools but don't support a separate build directory (${S} != ${B}). A new class, autotools-brokensep is used for this purpose. This doesn't introduce any change in behaviour in its own right. (From OE-Core rev: 006b8a7808a58713af16c326dc37d07765334b12) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: enable PAM at runtime based on DISTRO_FEATURESKoen Kooi2014-02-211-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Everything is setup to use PAM except for the server config. If 'pam' is in DISTRO_FEATURES the configs will be changed to enable it. Syslog will now show: Feb 19 09:28:36 beast sshd[2980]: pam_unix(sshd:session): session opened for user koen by (uid=0) And more importantly: koen@beast:~$ loginctl SESSION UID USER SEAT c1 1000 koen seat0 c3 1000 koen seat0 c13 1000 koen 3 sessions listed. Systemd now registers the session properly so it won't kill things like 'screen' and 'tmux' when disconnecting the ssh session. (From OE-Core rev: 08c523daec0f5161803d2a6704402490c18ff6ca) Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: drag in required PAM modules.Koen Kooi2014-02-091-1/+2
| | | | | | | | | | | /etc/pam.d/opensshd lists keyinit and uid as required, so add them to RDEPENDS when PAM is enabled. (From OE-Core rev: b2f49f9d2d8cd033611108c2bfe4871d02df0887) Signed-off-by: Koen Kooi <koen@dominion.thruhere.net> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: package sshd PAM config inside openssh-sshd packageKoen Kooi2014-02-091-1/+1
| | | | | | | | | | Without this PAM integration is broken after installing openssh-sshd (From OE-Core rev: 2ba31c0f0fad6a1917e282dc381e8632db08200c) Signed-off-by: Koen Kooi <koen@dominion.thruhere.net> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "Add missing RDEPENDS of initscripts-functions"Chen Qi2014-02-021-1/+1
| | | | | | | | | | | | | | | Instead of manually adding initscripts to RDEPENDS of each package, we should make it automatically handled by the update-rc.d.bbclass. This solution would have the benefit of backward compatibility. In other words, users need not modify their recipes. This reverts commit 16080a3485bd793edd66ed8361f1e8b86a9e19ea. (From OE-Core rev: f9f193219bd510160b6b09bae652a9dc8ea01e7b) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: fixes for systemdChen Qi2014-01-284-7/+7
| | | | | | | | | | | | | | This patch contains a few fixes for the systemd unit files of openssh. The fixes use the same unit files in Fedora 20 as a reference. 1) Remove sshdgenkeys.service and sshd@.service from SYSTEMD_SERVICE. 2) Fix the dependency and logic of sshdgenkeys.service. (From OE-Core rev: 4379e6f3096c893db5fa6a0b4569a0440e4494fe) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Add missing RDEPENDS of initscripts-functionsChen Qi2014-01-061-1/+1
| | | | | | | | | | | Now that the initscripts-functions has been packaged separately, packages which may use the functions script should have a runtime dependency on it. (From OE-Core rev: 6690c12cb1977f6bf93f3eb6d471dbd7db81bf28) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: remove unrecognised configure optionPaul Eggleton2013-12-051-2/+1
| | | | | | | | | | | | | ssh-rand-helper was removed in OpenSSH 6.0 according to the upstream changelog, so the configure option to enable/disable it was removed. Fixes the following warning: WARNING: QA Issue: openssh: configure was passed unrecognised options: --with-rand-helper (From OE-Core rev: 77d0e383303e9209ea2cd74f2eb98e3ed516b67c) Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* classes/recipes: More optimal DISTRO_FEATURES referencesRichard Purdie2013-12-051-7/+5
| | | | | | | | | Using the contains function results in more optimal sstate checksums resulting in better cache reuse as we as more consistent code. (From OE-Core rev: 9c93526756e7cbbff027c88eb972f877bcb1f057) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: upgrade to 6.4p1Paul Eggleton2013-11-1211-2/+2
| | | | | | | (From OE-Core rev: 19a483c157e783ded40e8dacac338a4d770a2d1a) Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: upgrade to 6.3p1Paul Eggleton2013-10-2912-80/+2
| | | | | | | | | | Removed the following backported patch(es): * mac.patch (From OE-Core rev: ce04ba6a5385ad2d021d472cf9236787c6ea7357) Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: fix sshd status command error promptQiang Chen2013-10-181-1/+1
| | | | | | | | | | | | | | | | | | | sshd status command results in error prompt: root@qemu0:~# /etc/init.d/sshd status /usr/sbin/sshd (pid 1199) is running... /etc/init.d/sshd: line 100: return: can only `return' from a function or sourced script "service --status-all" command also display wrong status for sshd. This commit fix this error prompt and make service command display right status for sshd. (From OE-Core rev: e7cf83ec3f39a7c41e38c6030b0d903fa7d37b2a) Signed-off-by: Qiang Chen <qiang.chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: use volatiles for managing /var/run/sshdMing Liu2013-09-172-2/+7
| | | | | | | | | | | | | It fixes the following failure: "fatal: Missing privilege separation directory: /var/run/sshd" when sshd is started through xinetd. (From OE-Core rev: a343c32891aa46a7f7d5f0cc6d1266a387900dad) Signed-off-by: Ming Liu <ming.liu@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Add systemd supportMuhammad Shakeel2013-09-104-2/+47
| | | | | | | | | | -Remove dependency on meta-systemd (From OE-Core rev: 6e6445d487c033913a29763f8e3a7a339d5b612d) Signed-off-by: Muhammad Shakeel <muhammad_shakeel@mentor.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: add init.d/sshd status command for LSB complianceJackie Huang2013-08-261-1/+9
| | | | | | | | | (From OE-Core rev: d1e518b6942b945be7a4d44bc137a1441af8f837) Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: fix for read-only rootfsChen Qi2013-08-162-8/+23
| | | | | | | | | | | | | | | | | | | | | | | | If the rootfs is read-only and the ssh keys are not available at system start-up, the init script will generate ssh keys into /etc/ssh, thus causing a 'read-only file system' error. In order for Yocto based image to work correctly for read-only rootfs, we use the following logic for openssh. If the rootfs is read-only and there are pre-generated keys under /etc/ssh, we use the pre-generated keys. Note the pre-generated keys are mainly for debugging or development purpose. If the rootfs is read-only and there are no pre-generated keys under /etc/ssh, we use /var/run/ssh as the location for ssh keys. That is, at system boot-up, the generated ssh keys will put into /var/run/ssh. [YOCTO #4887] (From OE-Core rev: 2ed44745024f04aa4e00ddba3009153c6b47c8e9) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Added Upstream Status to openssh-CVE-2011-4327Andrei Dinu2013-07-291-0/+2
| | | | | | | | | | | | | Updated Upstream Status to openssh patch. (From OE-Core rev: 71d4a91ffa062a4ab9a2dc0ce97e7405f3d15de7) Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> [sgw - Fixed commit line] Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: fix initscript restart commandMarc Ferland2013-07-021-1/+1
| | | | | | | | | | | start-stop-daemon should be called with '--oknodo' instead of '-oknodo'. (From OE-Core rev: 40f65a76b3291ae625c072a8efebbf134b15c367) Signed-off-by: Marc Ferland <ferlandm@sonatest.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: obey 'tcp-wrappers' PACKAGECONFIGRoy.Li2013-06-171-0/+3
| | | | | | | | (From OE-Core rev: 4defab3588a5a5e6e3fcdb8007eade18120094f6) Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: fix a unaligned memory access issueRoy.Li2013-06-172-0/+77
| | | | | | | | | | Backport patch to fix segment fault due to unaligned memory access (From OE-Core rev: c2ce8e3bc10aec4cb53faea091ad867bab405bb7) Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh : upgrade to 6.2p2Andrei Dinu2013-06-117-2/+3
| | | | | | | | | | upgrade from 6.2p1 -> 6.2p2 (From OE-Core rev: 752ad432a248befe7d7b1dd799209f7bcbe9231e) Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh : upgrade to 6.2p1Andrei Dinu2013-04-287-2/+2
| | | | | | | | | | from 6.1p1 -> 6.2p1 (From OE-Core rev: 5f0400d2eb9e660fcb4780c2badbfb8856e64893) Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: don't add update-rc.d to RDEPENDSMartin Jansa2013-04-021-2/+1
| | | | | | | | | | | | * sysvinit/systemd assumes that update-rc.d can be inhibited * with systemd enabled, sysvinit scripts are missing in packages and update-rc.d needs to be put in BAD_RECOMMENDATIONS to prevent update-rc.d trying to install them in postinst * update-rd.c shouldn't be in DEPENDS (From OE-Core rev: e9e4a90c7e66abe2ab2c335d60ef91e869f48693) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: fix RPROVIDESMartin Jansa2013-02-041-1/+2
| | | | | | | (From OE-Core rev: 43ddc955727361458fec92731775a1fc7f29917c) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh : upgrade to 6.1p1Andrei Dinu2013-01-287-3/+3
| | | | | | | (From OE-Core rev: 5534deb69b0a2835fbbf149a00d1f6ba61cc8160) Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: CVE-2011-4327Li Wang2012-11-282-1/+29
| | | | | | | | | | | | | | | | | | | | A security flaw was found in the way ssh-keysign, a ssh helper program for host based authentication, attempted to retrieve enough entropy information on configurations that lacked a built-in entropy pool in OpenSSL (a ssh-rand-helper program would be executed to retrieve the entropy from the system environment). A local attacker could use this flaw to obtain unauthorized access to host keys via ptrace(2) process trace attached to the 'ssh-rand-helper' program. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4327 http://www.openssh.com/txt/portable-keysign-rand-helper.adv [YOCTO #3493] (From OE-Core rev: bdce08215396e5ab99ada5fa0f62c3b002a44582) Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: openssh's init fails to restart if sshd is not runningAmy Fong2012-08-171-1/+1
| | | | | | | | | | | | | | openssh: openssh's init fails to restart if sshd is not running Because of "set -e", it's necessary to specify the -o (or --oknodo) so that start-stop-daemon returns an exit status of 0 if no actions are taken. (From OE-Core rev: 7e44d2e8457c9c90932ce4f0fd95c67b74efb2e0) Signed-off-by: Amy Fong <amy.fong@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: cleanup update-alternatives deprecated codeSaul Wold2012-08-151-4/+0
| | | | | | | (From OE-Core rev: 11c169a9b289b0412e512c37d380a99fd1630df5) Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: use ${localstatedir} instead of /var for packagingJavier Martinez Canillas2012-08-061-2/+2
| | | | | | | | | | It is considered good practice to use the build system provided variables instead of directly specify hardcoded paths. (From OE-Core rev: b7134e8f76026d15a5e35c6a2e5d77d5e48c2787) Signed-off-by: Javier Martinez Canillas <javier@dowhile0.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: replace CONFLICTS with RCONFLICTS_${PN}Martin Jansa2012-06-181-2/+2
| | | | | | | (From OE-Core rev: fbcda6eff010e0a39cc0145a514e7de99f475145) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: use new update-alternativesMark Hatle2012-05-301-20/+11
| | | | | | | (From OE-Core rev: b417ced0573acde896332827bcc13b0f7c5bd9fe) Signed-off-by: Mark Hatle <mark.hatle@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: upgrade to 6.0p1Scott Garman2012-05-086-4/+4
| | | | | | | | | | LICENSE checksum changed due to a trivial difference in the credits list. (From OE-Core rev: ce1fc60b0044bccf6cf8432700d6c0b6f042dae2) Signed-off-by: Scott Garman <scott.a.garman@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* PR Bump for OpenSSL 1.0Saul Wold2011-11-301-1/+1
| | | | | | | (From OE-Core rev: 59923e66e85471acdb70d72082a8906c69b17720) Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: upgrade to 5.9p1Scott Garman2011-10-276-2/+2
| | | | | | | (From OE-Core rev: 47c7f5a6f022dca10ae63851c7d9c14ee06f0c0b) Signed-off-by: Scott Garman <scott.a.garman@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Use useradd and update-rc.d classes in the OpenSSH recipeJulian Pidancet2011-10-101-21/+8
| | | | | | | | | | | | | | | | | The current sshd postinst and postrm scripts in the OpenSSH make the package dependant of the adduser/addgroup scripts which may not be available on all systems. This patch replaces the sshd postinst and postrm scripts with proper usage of the useradd and update-rc.d classes. This patch had been modified from the previous proposed version to use useradd long options for more clarity. (From OE-Core rev: 6b7f399d595ef58e759dab211f4ece155119a680) Signed-off-by: Julian Pidancet <julian.pidancet@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: update init script to create ECDSA keys if neededMartin Jansa2011-09-162-1/+5
| | | | | | | | | | * Starting with openssh-5.8p1, the server will default to a newer key algorithm (ECDSA). (From OE-Core rev: 998e3acf0d38007fde10f47f98b71192685e19b9) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Support PAMXiaofeng Yan2011-07-272-2/+21
| | | | | | | | | Adding configuration file "sshd" in /etc/pam.d/ for supporting pam. (From OE-Core rev: 8279f771a482d890ad897971cba1d656fdcaefe9) Signed-off-by: Xiaofeng Yan <xiaofeng.yan@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh/dropbear: No need for each to PROVIDE ssh/sshdRichard Purdie2011-07-071-1/+0
| | | | | | | | | | | | | | Nothing in the system actually uses the PROVIDES field for these recipes, its usually the runtime packages that are used. We can therefore remove the PROVIDES and hence quieten the associated warnings from bitbake. If these recipes do really need the PROVIDES, they would be better as virtuals and adding that to MULTI_PROVIDER_WHITELIST. (From OE-Core rev: 84f3ae92ab4345cc99b47e021ff960857f803d45) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Drop PRIORITY variableRichard Purdie2011-07-011-1/+0
| | | | | | | | | | | | | | | | As discussed on the mailing list, this variable isn't useful and if wanted would be better implemented by distros using pn-X overrides. This patch executes: find . -regex ".*\.\(bb\|inc\)$" | xargs sed -i '/^PRIORITY = ".*"$/d' against the tree removing the referenced. Thanks to Phil Blundell for the command. (From OE-Core rev: d122343362669c683acc4af295971a62cbc823fc) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: upgrade to v5.8p2Scott Garman2011-06-075-4/+5
| | | | | | | | | | LICENCE checksum updated due to a one-line change in the file (RedHat was added as a copyright holder). (From OE-Core rev: 969cdde4541819ef5123a77391d870843aff0b55) Signed-off-by: Scott Garman <scott.a.garman@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* update patch upstream statusQing He2011-05-171-1/+2
| | | | | | | | | | for the following recipes: pcmciautils openssl udev apt gdm (From OE-Core rev: 552c9fa44c2a2bb94bcf83bff802773265a35a27) Signed-off-by: Qing He <qing.he@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Don't use ${libdir}execTom Rini2011-05-171-3/+3
| | | | | | | | | | This is 1259e0289ce53198cc6c57a9616c8a1623be502a in OE. [RP: Added PR bump] (From OE-Core rev: 49e8503acb8424979b12ec6b5ea17421a1edc80c) Signed-off-by: Tom Rini <tom_rini@mentor.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: Add Upstream-Status to various recipe patchesScott Garman2011-05-171-3/+6
| | | | | | | | | | | | | | | | | | | Add Upstream-Status tag to patches for the following recipes: openssh dbus-glib expat opensp sgml-common at cpio (GPLv3 version) libpam icu (From OE-Core rev: 0702602332ad63c2cfaa207516497bb0b75bfdf3) Signed-off-by: Scott Garman <scott.a.garman@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: allow the openssh meta package to be emptyScott Garman2011-03-101-1/+3
| | | | | | | | | | | This allows the openssh meta-package to be used in the poky-ssh task. Otherwise there will be no package named openssh to install during image creation. (From OE-Core rev: 9f4747a1e7e04e0b08b7b402bd8dd7cf8ccd0166) Signed-off-by: Scott Garman <scott.a.garman@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes-connectivity: Cleanup package descriptions and summariesMark Hatle2010-10-111-0/+1
| | | | | | | | | [BUGID #281] Evaluate and update each package in recipes-connectivity to ensure they have a consistent summary and description. Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* openssh: new recipe additionScott Garman2010-09-025-0/+390
OpenSSH v5.6p1, derived from OpenEmbedded's recipe. Signed-off-by: Scott Garman <scott.a.garman@intel.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-05-27 03:20:02 +0000