openembedded-core.git/meta/recipes-connectivity/openssh, branch dylan Mirror of openembedded-core openssh: fix initscript restart command 2013-07-08T15:28:30+00:00 Marc Ferland ferlandm@sonatest.com 2013-06-27T22:53:40+00:00 1832280f616fe7010260afb53bbc3b1c6d7ea08b start-stop-daemon should be called with '--oknodo' instead of '-oknodo'. (From OE-Core master rev: 40f65a76b3291ae625c072a8efebbf134b15c367) Signed-off-by: Marc Ferland <ferlandm@sonatest.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
start-stop-daemon should be called with '--oknodo' instead of
'-oknodo'.

(From OE-Core master rev: 40f65a76b3291ae625c072a8efebbf134b15c367)

Signed-off-by: Marc Ferland <ferlandm@sonatest.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
openssh: don't add update-rc.d to RDEPENDS 2013-04-02T17:14:51+00:00 Martin Jansa martin.jansa@gmail.com 2013-03-28T13:54:09+00:00 e9e4a90c7e66abe2ab2c335d60ef91e869f48693 * sysvinit/systemd assumes that update-rc.d can be inhibited * with systemd enabled, sysvinit scripts are missing in packages and update-rc.d needs to be put in BAD_RECOMMENDATIONS to prevent update-rc.d trying to install them in postinst * update-rd.c shouldn't be in DEPENDS Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
* sysvinit/systemd assumes that update-rc.d can be inhibited
* with systemd enabled, sysvinit scripts are missing in packages
  and update-rc.d needs to be put in BAD_RECOMMENDATIONS to prevent
  update-rc.d trying to install them in postinst
* update-rd.c shouldn't be in DEPENDS

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
openssh: fix RPROVIDES 2013-02-04T23:18:37+00:00 Martin Jansa martin.jansa@gmail.com 2013-02-04T18:33:40+00:00 43ddc955727361458fec92731775a1fc7f29917c Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
openssh : upgrade to 6.1p1 2013-01-28T12:46:46+00:00 Andrei Dinu andrei.adrianx.dinu@intel.com 2013-01-28T08:50:04+00:00 5534deb69b0a2835fbbf149a00d1f6ba61cc8160 Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
openssh: CVE-2011-4327 2012-11-28T07:38:26+00:00 Li Wang li.wang@windriver.com 2012-11-27T06:13:21+00:00 bdce08215396e5ab99ada5fa0f62c3b002a44582 A security flaw was found in the way ssh-keysign, a ssh helper program for host based authentication, attempted to retrieve enough entropy information on configurations that lacked a built-in entropy pool in OpenSSL (a ssh-rand-helper program would be executed to retrieve the entropy from the system environment). A local attacker could use this flaw to obtain unauthorized access to host keys via ptrace(2) process trace attached to the 'ssh-rand-helper' program. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4327 http://www.openssh.com/txt/portable-keysign-rand-helper.adv [YOCTO #3493] Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
A security flaw was found in the way ssh-keysign,
a ssh helper program for host based authentication,
attempted to retrieve enough entropy information on configurations that
lacked a built-in entropy pool in OpenSSL (a ssh-rand-helper program would
be executed to retrieve the entropy from the system environment).
A local attacker could use this flaw to obtain unauthorized access to host keys
via ptrace(2) process trace attached to the 'ssh-rand-helper' program.

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4327
http://www.openssh.com/txt/portable-keysign-rand-helper.adv

[YOCTO #3493]

Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
openssh: openssh's init fails to restart if sshd is not running 2012-08-17T17:04:10+00:00 Amy Fong amy.fong@windriver.com 2012-07-27T15:06:55+00:00 7e44d2e8457c9c90932ce4f0fd95c67b74efb2e0 openssh: openssh's init fails to restart if sshd is not running Because of "set -e", it's necessary to specify the -o (or --oknodo) so that start-stop-daemon returns an exit status of 0 if no actions are taken. Signed-off-by: Amy Fong <amy.fong@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> 
openssh: openssh's init fails to restart if sshd is not running

Because of "set -e", it's necessary to specify the -o (or --oknodo)
so that start-stop-daemon returns an exit status of 0 if no actions
are taken.

Signed-off-by: Amy Fong <amy.fong@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
openssh: cleanup update-alternatives deprecated code 2012-08-15T13:16:38+00:00 Saul Wold sgw@linux.intel.com 2012-07-26T22:55:23+00:00 11c169a9b289b0412e512c37d380a99fd1630df5 Signed-off-by: Saul Wold <sgw@linux.intel.com> 
Signed-off-by: Saul Wold <sgw@linux.intel.com>
openssh: use ${localstatedir} instead of /var for packaging 2012-08-06T13:36:33+00:00 Javier Martinez Canillas javier@dowhile0.org 2012-08-05T19:48:46+00:00 b7134e8f76026d15a5e35c6a2e5d77d5e48c2787 It is considered good practice to use the build system provided variables instead of directly specify hardcoded paths. Signed-off-by: Javier Martinez Canillas <javier@dowhile0.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
It is considered good practice to use the build system provided
variables instead of directly specify hardcoded paths.

Signed-off-by: Javier Martinez Canillas <javier@dowhile0.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
recipes: replace CONFLICTS with RCONFLICTS_${PN} 2012-06-18T12:18:40+00:00 Martin Jansa martin.jansa@gmail.com 2012-06-16T18:08:18+00:00 fbcda6eff010e0a39cc0145a514e7de99f475145 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
openssh: use new update-alternatives 2012-05-30T09:43:42+00:00 Mark Hatle mark.hatle@windriver.com 2012-05-15T23:34:02+00:00 b417ced0573acde896332827bcc13b0f7c5bd9fe Signed-off-by: Mark Hatle <mark.hatle@windriver.com> 
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>