From f5f5bd92df7708d19ac19a9df922739520c707ee Mon Sep 17 00:00:00 2001 From: Matt Weber Date: Tue, 14 Jul 2015 15:20:22 -0500 Subject: [PATCH] openssh: selinux and pam support [Thomas: in the sed expression, use % as a delimiter instead of /, since the line contains several / that all had to be escaped.] Signed-off-by: Matthew Weber Reviewed-by: Samuel Martin Signed-off-by: Thomas Petazzoni --- package/openssh/openssh.mk | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/package/openssh/openssh.mk b/package/openssh/openssh.mk index 11a844e938..5a7162ffda 100644 --- a/package/openssh/openssh.mk +++ b/package/openssh/openssh.mk @@ -30,8 +30,24 @@ endif OPENSSH_DEPENDENCIES = zlib openssl ifeq ($(BR2_PACKAGE_LINUX_PAM),y) +define OPENSSH_INSTALL_PAM_CONF + $(INSTALL) -D -m 644 $(@D)/contrib/sshd.pam.generic $(TARGET_DIR)/etc/pam.d/sshd + $(SED) '\%password required /lib/security/pam_cracklib.so%d' $(TARGET_DIR)/etc/pam.d/sshd + $(SED) 's/\#UsePAM no/UsePAM yes/' $(TARGET_DIR)/etc/ssh/sshd_config +endef + OPENSSH_DEPENDENCIES += linux-pam OPENSSH_CONF_OPTS += --with-pam +OPENSSH_POST_INSTALL_TARGET_HOOKS += OPENSSH_INSTALL_PAM_CONF +else +OPENSSH_CONF_OPTS += --without-pam +endif + +ifeq ($(BR2_PACKAGE_LIBSELINUX),y) +OPENSSH_DEPENDENCIES += libselinux +OPENSSH_CONF_OPTS += --with-selinux +else +OPENSSH_CONF_OPTS += --without-selinux endif define OPENSSH_INSTALL_INIT_SYSTEMD