Print this page
Have openssh properly use auditing to provide audit context for logins.
Patches pulled from SmartOS, originally done by:
        Alex Wilson <alex.wilson@joyent.com>
NOTE: This is a sideport from their illumos-extra, and it needs tracking.

Split Close
Expand all
Collapse all
          --- old/build/openssh/build.sh
          +++ new/build/openssh/build.sh
↓ open down ↓ 44 lines elided ↑ open up ↑
  45   45      --libdir=$PREFIX/lib
  46   46      --libexecdir=$PREFIX/libexec
  47   47      "
  48   48  # Feature choices
  49   49  CONFIGURE_OPTS="
  50   50      --with-solaris-contracts
  51   51      --with-solaris-projects
  52   52      --with-tcp-wrappers
  53   53      --with-ssl-engine
  54   54      --with-pam
       55 +    --with-audit=solaris
  55   56      "
  56   57  
  57   58  install_smf() {
  58   59      logmsg "Installing SMF components"
  59   60      logcmd mkdir -p $DESTDIR/lib/svc/manifest/network || \
  60   61          logerr "--- Failed to create manifest directory"
  61   62      logcmd cp $SRCDIR/ssh.xml $DESTDIR/lib/svc/manifest/network/ || \
  62   63          logerr "--- Failed to copy manifest file"
  63   64      logcmd mkdir -p $DESTDIR/lib/svc/method || \
  64   65          logerr "--- Failed to create method directory"
  65   66      logcmd cp $SRCDIR/method-sshd $DESTDIR/lib/svc/method/sshd || \
  66   67          logerr "--- Failed to copy method script"
  67   68  }
  68   69  
       70 +CFLAGS+="-DPAM_ENHANCEMENT -DSET_USE_PAM -DPAM_BUGFIX -DDTRACE_SFTP"
       71 +
  69   72  init
  70   73  download_source $PROG $PROG $VER
  71   74  patch_source
  72   75  prep_build
       76 +run_autoconf
  73   77  build
  74   78  
  75   79  # Remove the letter from VER for packaging
  76   80  VER=${VER//p/.}
  77   81  
  78   82  # Client package
  79   83  RUN_DEPENDS_IPS="-pkg:/network/ssh -pkg:/network/ssh/ssh-key"
  80   84  make_package client.mog
  81   85  
  82   86  # Server package
↓ open down ↓ 12 lines elided ↑ open up ↑
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX