openembedded-core.git/meta/recipes-connectivity/openssh, branch daisy

openssh: move setting LD to allow for correct override

2015-02-06T14:48:17+00:00

Using the export LD in the recipe does not allow for secodnary toolchain
overriding LD later, by setting it in the do_configure_append the export
is used by autotools setting LD based on the env, but would allow for
override later.

[YOCTO #6997]

(From OE-Core rev: 9b37e630f5f6e37e928f825c4f67481cf58c98a1)

Signed-off-by: Saul Wold 
Signed-off-by: Ross Burton 
Signed-off-by: Richard Purdie 

Conflicts:
	meta/recipes-connectivity/openssh/openssh_6.5p1.bb

openssh: avoid screen sessions being killed on disconnect with systemd

2014-11-06T11:38:50+00:00

Tell systemd just to kill the sshd process when the ssh connection drops
instead of the entire cgroup for sshd, so that any screen sessions (and
more to the point, processes within them) do not get killed.

(This is what the Fedora sshd service file does, and what we're already
doing in the dropbear service file).

(From OE-Core master rev: 3c238dff41fbd3687457989c7b17d22b2cc844be)

Signed-off-by: Paul Eggleton 
Signed-off-by: Ross Burton 
Signed-off-by: Richard Purdie

openssh: fix for CVE-2014-2653

2014-05-29T12:42:10+00:00

The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and
earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking
by presenting an unacceptable HostCertificate.

(From OE-Core rev: 7b2fff61b3d1c0566429793ee348fa8978ef0cba)

Signed-off-by: Chen Qi 
Signed-off-by: Richard Purdie 

Conflicts:
	meta/recipes-connectivity/openssh/openssh_6.5p1.bb

openssh: fix for CVE-2014-2532

2014-05-29T12:42:10+00:00

sshd in OpenSSH before 6.6 does not properly support wildcards on
AcceptEnv lines in sshd_config, which allows remote attackers to
bypass intended environment restrictions by using a substring located
before a wildcard character.

(From OE-Core rev: a8d3b8979c27a8dc87971b66a1d9d9282f660596)

Signed-off-by: Chen Qi 
Signed-off-by: Richard Purdie 

Conflicts:
	meta/recipes-connectivity/openssh/openssh_6.5p1.bb

openssh: add /var/log/lastlog to volatile list

2014-05-29T12:42:07+00:00

The /var/log/messages reports /var/log/lastlog as missing, since openssh
needs this file, create it as a volatile.

[YOCTO #6172]

(From OE-Core rev: a29af8c20187a65fbdbbedd0b7158c07d3e713cf)

Signed-off-by: Saul Wold 
Signed-off-by: Richard Purdie

openssh-sshd: host contamination fix

2014-05-23T16:09:39+00:00

If you do a readelf -x .rodata /path/.../to/openssh/6.5p1-r0/packages-split/openssh-sshd/usr/sbin/sshd

You'll see two references to OE's sysroots/${BUILD_SYS} login and passwd binaries.
First one can be overridden with LOGIN_PROGRAM environment variable (see configure.ac),
second needs a cached variable definition.

(From OE-Core rev: 2127c80d0cc2a3a4d676bd3c0890454a175fba8e)

Signed-off-by: Matthieu Crapet 
Signed-off-by: Richard Purdie

openssh: fix sshd_config_readonly creation

2014-04-10T09:22:25+00:00

The readonly sshd config sshd_config_readonly needs to be created from
the installed sshd_config as make install will adjust the paths in
the config file. This fixes the path for sftp-server being correct
in sshd_config but incorrect in sshd_config_readonly.

Signed-off-by: Jonathan Liu 
Signed-off-by: Richard Purdie

openssh: build without libbsd

2014-03-31T16:53:45+00:00

We do not DEPEND on libbsd, so we do not want to
build with it just because libutil.h is found by configure.
As noted in the patch, specifying --disable-libutil to
configure does not work, so we provide "cached" configure
variables.

Signed-off-by: Joe Slater 
Signed-off-by: Richard Purdie

openssh: Update init file to add ED25519 Key generation

2014-03-19T14:16:05+00:00

[YOCTO #5983]

Signed-off-by: Saul Wold 
Signed-off-by: Richard Purdie

openssh: upgrade to 6.5p1

2014-02-28T18:02:10+00:00

Signed-off-by: Paul Eggleton 
Signed-off-by: Richard Purdie