aboutsummaryrefslogtreecommitdiffstats
path: root/meta/recipes-connectivity/openssh
AgeCommit message (Collapse)Author
2013-09-17openssh: use volatiles for managing /var/run/sshdMing Liu
It fixes the following failure: "fatal: Missing privilege separation directory: /var/run/sshd" when sshd is started through xinetd. Signed-off-by: Ming Liu <ming.liu@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-09-10openssh: Add systemd supportMuhammad Shakeel
-Remove dependency on meta-systemd Signed-off-by: Muhammad Shakeel <muhammad_shakeel@mentor.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-08-26openssh: add init.d/sshd status command for LSB complianceJackie Huang
Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-08-16openssh: fix for read-only rootfsChen Qi
If the rootfs is read-only and the ssh keys are not available at system start-up, the init script will generate ssh keys into /etc/ssh, thus causing a 'read-only file system' error. In order for Yocto based image to work correctly for read-only rootfs, we use the following logic for openssh. If the rootfs is read-only and there are pre-generated keys under /etc/ssh, we use the pre-generated keys. Note the pre-generated keys are mainly for debugging or development purpose. If the rootfs is read-only and there are no pre-generated keys under /etc/ssh, we use /var/run/ssh as the location for ssh keys. That is, at system boot-up, the generated ssh keys will put into /var/run/ssh. [YOCTO #4887] Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-07-27openssh: Added Upstream Status to openssh-CVE-2011-4327Andrei Dinu
Updated Upstream Status to openssh patch. Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> [sgw - Fixed commit line] Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-07-02openssh: fix initscript restart commandMarc Ferland
start-stop-daemon should be called with '--oknodo' instead of '-oknodo'. Signed-off-by: Marc Ferland <ferlandm@sonatest.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-06-17openssh: obey 'tcp-wrappers' PACKAGECONFIGRoy.Li
Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-06-17openssh: fix a unaligned memory access issueRoy.Li
Backport patch to fix segment fault due to unaligned memory access Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-06-10openssh : upgrade to 6.2p2Andrei Dinu
upgrade from 6.2p1 -> 6.2p2 Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-04-28openssh : upgrade to 6.2p1Andrei Dinu
from 6.1p1 -> 6.2p1 Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-04-02openssh: don't add update-rc.d to RDEPENDSMartin Jansa
* sysvinit/systemd assumes that update-rc.d can be inhibited * with systemd enabled, sysvinit scripts are missing in packages and update-rc.d needs to be put in BAD_RECOMMENDATIONS to prevent update-rc.d trying to install them in postinst * update-rd.c shouldn't be in DEPENDS Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-02-04openssh: fix RPROVIDESMartin Jansa
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-01-28openssh : upgrade to 6.1p1Andrei Dinu
Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-11-28openssh: CVE-2011-4327Li Wang
A security flaw was found in the way ssh-keysign, a ssh helper program for host based authentication, attempted to retrieve enough entropy information on configurations that lacked a built-in entropy pool in OpenSSL (a ssh-rand-helper program would be executed to retrieve the entropy from the system environment). A local attacker could use this flaw to obtain unauthorized access to host keys via ptrace(2) process trace attached to the 'ssh-rand-helper' program. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4327 http://www.openssh.com/txt/portable-keysign-rand-helper.adv [YOCTO #3493] Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-08-17openssh: openssh's init fails to restart if sshd is not runningAmy Fong
openssh: openssh's init fails to restart if sshd is not running Because of "set -e", it's necessary to specify the -o (or --oknodo) so that start-stop-daemon returns an exit status of 0 if no actions are taken. Signed-off-by: Amy Fong <amy.fong@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2012-08-15openssh: cleanup update-alternatives deprecated codeSaul Wold
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2012-08-06openssh: use ${localstatedir} instead of /var for packagingJavier Martinez Canillas
It is considered good practice to use the build system provided variables instead of directly specify hardcoded paths. Signed-off-by: Javier Martinez Canillas <javier@dowhile0.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-06-18recipes: replace CONFLICTS with RCONFLICTS_${PN}Martin Jansa
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-05-30openssh: use new update-alternativesMark Hatle
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
2012-05-08openssh: upgrade to 6.0p1Scott Garman
LICENSE checksum changed due to a trivial difference in the credits list. Signed-off-by: Scott Garman <scott.a.garman@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-11-30PR Bump for OpenSSL 1.0Saul Wold
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2011-10-27openssh: upgrade to 5.9p1Scott Garman
Signed-off-by: Scott Garman <scott.a.garman@intel.com>
2011-10-10Use useradd and update-rc.d classes in the OpenSSH recipeJulian Pidancet
The current sshd postinst and postrm scripts in the OpenSSH make the package dependant of the adduser/addgroup scripts which may not be available on all systems. This patch replaces the sshd postinst and postrm scripts with proper usage of the useradd and update-rc.d classes. This patch had been modified from the previous proposed version to use useradd long options for more clarity. Signed-off-by: Julian Pidancet <julian.pidancet@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-09-15openssh: update init script to create ECDSA keys if neededMartin Jansa
* Starting with openssh-5.8p1, the server will default to a newer key algorithm (ECDSA). Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2011-07-27openssh: Support PAMXiaofeng Yan
Adding configuration file "sshd" in /etc/pam.d/ for supporting pam. Signed-off-by: Xiaofeng Yan <xiaofeng.yan@windriver.com>
2011-07-07openssh/dropbear: No need for each to PROVIDE ssh/sshdRichard Purdie
Nothing in the system actually uses the PROVIDES field for these recipes, its usually the runtime packages that are used. We can therefore remove the PROVIDES and hence quieten the associated warnings from bitbake. If these recipes do really need the PROVIDES, they would be better as virtuals and adding that to MULTI_PROVIDER_WHITELIST. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-07-01Drop PRIORITY variableRichard Purdie
As discussed on the mailing list, this variable isn't useful and if wanted would be better implemented by distros using pn-X overrides. This patch executes: find . -regex ".*\.\(bb\|inc\)$" | xargs sed -i '/^PRIORITY = ".*"$/d' against the tree removing the referenced. Thanks to Phil Blundell for the command. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-06-06openssh: upgrade to v5.8p2Scott Garman
LICENCE checksum updated due to a one-line change in the file (RedHat was added as a copyright holder). Signed-off-by: Scott Garman <scott.a.garman@intel.com>
2011-05-17update patch upstream statusQing He
for the following recipes: pcmciautils openssl udev apt gdm Signed-off-by: Qing He <qing.he@intel.com>
2011-05-17openssh: Don't use ${libdir}execTom Rini
This is 1259e0289ce53198cc6c57a9616c8a1623be502a in OE. [RP: Added PR bump] Signed-off-by: Tom Rini <tom_rini@mentor.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-05-17recipes: Add Upstream-Status to various recipe patchesScott Garman
Add Upstream-Status tag to patches for the following recipes: openssh dbus-glib expat opensp sgml-common at cpio (GPLv3 version) libpam icu Signed-off-by: Scott Garman <scott.a.garman@intel.com>
2011-03-10openssh: allow the openssh meta package to be emptyScott Garman
This allows the openssh meta-package to be used in the poky-ssh task. Otherwise there will be no package named openssh to install during image creation. Signed-off-by: Scott Garman <scott.a.garman@intel.com>
2010-10-11recipes-connectivity: Cleanup package descriptions and summariesMark Hatle
[BUGID #281] Evaluate and update each package in recipes-connectivity to ensure they have a consistent summary and description. Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
2010-09-02openssh: new recipe additionScott Garman
OpenSSH v5.6p1, derived from OpenEmbedded's recipe. Signed-off-by: Scott Garman <scott.a.garman@intel.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-26 17:11:26 +0000