openssh: use --with-privsep-user=nobody

This commit is contained in:
MilhouseVH 2017-05-06 22:17:40 +01:00
parent e99599baf5
commit bd6e6f5879
2 changed files with 2 additions and 1 deletions

View File

@ -41,6 +41,7 @@ PKG_CONFIGURE_OPTS_TARGET="--sysconfdir=/etc/ssh \
--disable-wtmpx \ --disable-wtmpx \
--without-rpath \ --without-rpath \
--with-ssl-engine \ --with-ssl-engine \
--with-privsep-user=nobody \
--disable-pututline \ --disable-pututline \
--disable-pututxline \ --disable-pututxline \
--disable-etc-default-login \ --disable-etc-default-login \
@ -64,7 +65,6 @@ post_makeinstall_target() {
sed -e "s|^#PermitRootLogin.*|PermitRootLogin yes|g" \ sed -e "s|^#PermitRootLogin.*|PermitRootLogin yes|g" \
-e "s|^#StrictModes.*|StrictModes no|g" \ -e "s|^#StrictModes.*|StrictModes no|g" \
-e "s|^#UsePrivilegeSeparation.*|UsePrivilegeSeparation no|g" \
-i $INSTALL/etc/ssh/sshd_config -i $INSTALL/etc/ssh/sshd_config
echo "PubkeyAcceptedKeyTypes +ssh-dss" >> $INSTALL/etc/ssh/sshd_config echo "PubkeyAcceptedKeyTypes +ssh-dss" >> $INSTALL/etc/ssh/sshd_config

View File

@ -16,5 +16,6 @@
# along with OpenELEC. If not, see <http://www.gnu.org/licenses/>. # along with OpenELEC. If not, see <http://www.gnu.org/licenses/>.
################################################################################ ################################################################################
d /var/empty 0600 root root - -
d /storage/.cache/ssh 0755 root root - - d /storage/.cache/ssh 0755 root root - -
d /storage/.ssh 0700 root root - - d /storage/.ssh 0700 root root - -