Patch: Solaris packages don't create privsep user or group
Darren J Moffat
Darren.Moffat at Sun.COM
Wed Jul 17 07:21:06 EST 2002
>Here are the checkinstall script and the postinstall script that I use in
>my openssh package for Solaris. They create the keys and the group and
>user for ssh (sshd), and, if the package is being installed in a different
>root, create an init script that will run these things and then remove
>itself on the next reboot. Feel free to use any part of this. The
>/var/empty directory is, by the way, installed by the package itself.
Creating the keys in a postinstall script makes the package incompatible
with Jumpstart Flash installations. It is a better idea to keep the
current practice and create the keys at boot time if they don't already
exist.
In Solaris 9 we create the keys at boot time and also modified sys-unconfig
to remove the keys from the system. Both of these ensure that Flash
archives can be created that don't contain the identity of the original
system.
--
Darren J Moffat
More information about the openssh-unix-dev
mailing list