Patch: Solaris packages don't create privsep user or group

Darren J Moffat Darren.Moffat at Sun.COM
Wed Jul 17 07:21:06 EST 2002


>Here are the checkinstall script and the postinstall script that I use in
>my openssh package for Solaris. They create the keys and the group and
>user for ssh (sshd), and, if the package is being installed in a different
>root, create an init script that will run these things and then remove
>itself on the next reboot. Feel free to use any part of this. The
>/var/empty directory is, by the way, installed by the package itself.

Creating the keys in a postinstall script makes the package incompatible
with Jumpstart Flash installations.  It is a better idea to keep the
current practice and create the keys at boot time if they don't already
exist.

In Solaris 9 we create the keys at boot time and also modified sys-unconfig
to remove the keys from the system.  Both of these ensure that Flash
archives can be created that don't contain the identity of the original
system.

--
Darren J Moffat




More information about the openssh-unix-dev mailing list