openssh/openssh.nm

   1 ###############################################################################
   2 # IPFire.org    - An Open Source Firewall Solution                            #
   3 # Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
   4 ###############################################################################
   5
   6 name       = openssh
   7 version    = 7.3p1
   8 release    = 1
   9
  10 groups     = Application/Internet
  11 url        = http://www.openssh.com/portable.html
  12 license    = MIT
  13 summary    = An open source implementation of SSH protocol versions 1 and 2.
  14
  15 description
  16         SSH (Secure SHell) is a program for logging into and executing
  17         commands on a remote machine. SSH is intended to replace rlogin and
  18         rsh, and to provide secure encrypted communications between two
  19         untrusted hosts over an insecure network.
  20 end
  21
  22 source_dl  = http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/
  23
  24 build
  25         requires
  26                 audit-devel
  27                 autoconf
  28                 automake
  29                 groff
  30                 libedit-devel
  31                 ncurses-devel
  32                 openldap-devel
  33                 openssl-devel >= 1.0.2
  34                 pam-devel
  35                 util-linux
  36                 zlib-devel
  37         end
  38
  39         configure_options += \
  40                 --sysconfdir=%{sysconfdir}/ssh \
  41                 --datadir=%{datadir}/sshd \
  42                 --libexecdir=%{libdir}/openssh \
  43                 --with-default-path=/usr/local/bin:/bin:/usr/bin \
  44                 --with-superuser-path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin \
  45                 --with-privsep-path=/var/empty/sshd \
  46                 --enable-vendor-patchlevel="%{DISTRO_NAME} %{thisver}" \
  47                 --disable-strip \
  48                 --with-ssl-engine \
  49                 --with-authorized-keys-command \
  50                 --with-ipaddr-display \
  51                 --with-pam \
  52                 --with-libedit \
  53                 --with-audit=linux
  54
  55         prepare_cmds
  56                 autoreconf -vfi
  57         end
  58
  59         install_cmds
  60                 # Disable GSS API authentication because KRB5 is required for that.
  61                 sed -e "s/^.*GSSAPIAuthentication/#&/" -i %{BUILDROOT}/etc/ssh/ssh_config
  62
  63                 # Enable PAM usage, disable ChallengeResponseAuthentication and disable Motd.
  64                 sed \
  65                         -e '/^#ChallengeResponseAuthentication yes$/c ChallengeResponseAuthentication no' \
  66                         -e '/^#PrintMotd yes$/c PrintMotd no' \
  67                         -e '/^#UsePAM no$/c UsePAM yes' \
  68                         -i %{BUILDROOT}/etc/ssh/sshd_config
  69
  70                 # Install scriptfile for key generation
  71                 mkdir -pv %{BUILDROOT}%{sbindir}
  72                 install -m 754 %{DIR_SOURCE}/sshd-keygen %{BUILDROOT}%{sbindir}
  73
  74                 # Install ssh-copy-id.
  75                 install -m755 contrib/ssh-copy-id %{BUILDROOT}%{bindir}
  76                 install contrib/ssh-copy-id.1 %{BUILDROOT}%{mandir}/man1/
  77         end
  78 end
  79
  80 packages
  81         package openssh
  82                 prerequires
  83                         shadow-utils
  84                 end
  85
  86                 configfiles
  87                         %{sysconfdir}/ssh/moduli
  88                 end
  89
  90                 script prein
  91                         getent group ssh_keys >/dev/null || groupadd -r ssh_keys
  92                 end
  93         end
  94
  95         package openssh-clients
  96                 summary = OpenSSH client applications.
  97                 description = %{summary}
  98
  99                 requires = openssh = %{thisver}
 100
 101                 files
 102                         %{sysconfdir}/ssh/ssh_config
 103                         %{bindir}/scp
 104                         %{bindir}/sftp
 105                         %{bindir}/slogin
 106                         %{bindir}/ssh
 107                         %{bindir}/ssh-add
 108                         %{bindir}/ssh-agent
 109                         %{bindir}/ssh-copy-id
 110                         %{bindir}/ssh-keyscan
 111                         %{libdir}/openssh/ssh-pkcs11-helper
 112                         %{mandir}/man1/scp.1*
 113                         %{mandir}/man1/sftp.1*
 114                         %{mandir}/man1/slogin.1*
 115                         %{mandir}/man1/ssh-add.1*
 116                         %{mandir}/man1/ssh-agent.1*
 117                         %{mandir}/man1/ssh-copy-id.1*
 118                         %{mandir}/man1/ssh-keyscan.1*
 119                         %{mandir}/man1/ssh.1*
 120                         %{mandir}/man5/ssh_config.5*
 121                         %{mandir}/man8/ssh-pkcs11-helper.8*
 122                 end
 123
 124                 configfiles
 125                         %{sysconfdir}/ssh/ssh_config
 126                 end
 127         end
 128
 129         package openssh-server
 130                 summary = OpenSSH server applications.
 131                 description = %{summary}
 132
 133                 requires
 134                         audit
 135                         openssh = %{thisver}
 136                 end
 137
 138                 files
 139                         %{sysconfdir}/pam.d/sshd
 140                         %{sysconfdir}/ssh/sshd_config
 141                         %{unitdir}/sshd.service
 142                         %{unitdir}/sshd-keygen.service
 143                         %{libdir}/openssh/sftp-server
 144                         %{sbindir}/sshd-keygen
 145                         %{sbindir}/sshd
 146                         %{mandir}/man5/sshd_config.5*
 147                         %{mandir}/man5/moduli.5*
 148                         %{mandir}/man8/sshd.8*
 149                         %{mandir}/man8/sftp-server.8*
 150                         /var/empty/sshd
 151                 end
 152
 153                 configfiles
 154                         %{sysconfdir}/ssh/sshd_config
 155                 end
 156
 157                 prerequires
 158                         shadow-utils
 159                         systemd-units
 160                 end
 161
 162                 script prein
 163                         # Create unprivileged user and group.
 164                         getent group sshd >/dev/null || groupadd -r sshd
 165                         getent passwd sshd >/dev/null || useradd -r -g sshd \
 166                                 -c "Privilege-separated SSH" \
 167                                 -d /var/empty/sshd -s /sbin/nologin sshd
 168                 end
 169
 170                 script postin
 171                         /bin/systemctl daemon-reload >/dev/null 2>&1 || :
 172                 end
 173
 174                 script preun
 175                         /bin/systemctl --no-reload disable sshd.service >/dev/null 2>&1 || :
 176                         /bin/systemctl stop sshd.service >/dev/null 2>&1 || :
 177                 end
 178
 179                 script postun
 180                         /bin/systemctl daemon-reload >/dev/null 2>&1 || :
 181                 end
 182
 183                 script postup
 184                         /bin/systemctl daemon-reload >/dev/null 2>&1 || :
 185
 186                         /bin/systemctl try-restart sshd.service >/dev/null 2>&1 || :
 187                         /bin/systemctl try-restart sshd-keygen.service >/dev/null 2>&1 || :
 188                 end
 189         end
 190
 191         package %{name}-debuginfo
 192                 template DEBUGINFO
 193         end
 194 end