more rpm problems...

[Pekka Savola]

On Mon, 12 Feb 2001, Damien Miller wrote:
> On Sun, 11 Feb 2001, Pekka Savola wrote:
>
>
> > +# Reserve options to override askpass settings with rpm -ba|--rebuild --define
> > +%{?skip_x11_askpass:%define no_x11_askpass 1}
> > +%{?skip_gnome_askpass:%define no_gnome_askpass 1}
> > +
> >  Summary: OpenSSH free Secure Shell (SSH) implementation
> >  Name: openssh
> >  Version: %{oversion}
> > ----8<---
> > Also, it'd be probably good idea to add rpm >= 3.0.5 Requires and/or
> > BuildRequires so people don't wonder why their non-updated RHL6x can't
> > cope with --rebuild.
>
> Thanks - both of these are in. The Redhat spec file now can do
>
> rpm -ba openssh.spec --define "skip_x11_askpass 1"
>                      --define "skip_gnome_askpass 1"
>                      --define "rh7 1"
>
> The rh7 define uses the newer pam_stack stuff in /etc/pam.d/sshd

Actually, that system-auth thing is also in RH62 pam errata -- 0.72 is
enough for it.  Works fine here on RHL62, at least.

So it could be enabled by default too, but then Requires: pam >= 0.72 or
Requires: /etc/pam.d/system-auth would be needed to clear up potential
confusion.

These mods are good for centralized access control (identical with telnet,
console etc.)

-- 
Pekka Savola                  "Tell me of difficulties surmounted,
Netcore Oy                    not those you stumble over and fall"
Systems. Networks. Security.   -- Robert Jordan: A Crown of Swords