source: postlfs/security/ssh-askpass.xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
   "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
  <!ENTITY % general-entities SYSTEM "../../general.ent">
  %general-entities;

  <!ENTITY ssh-askpass-download-http
    "https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-&ssh-askpass-version;.tar.gz">
  <!ENTITY ssh-askpass-download-ftp  " ">
  <!ENTITY ssh-askpass-md5sum        "&openssh-md5sum;">
  <!ENTITY ssh-askpass-size          "1.8 MB">
  <!ENTITY ssh-askpass-buildsize     "10 MB">
  <!ENTITY ssh-askpass-time          "less than 0.1 SBU">
]>

<sect1 id="ssh-askpass" xreflabel="ssh-askpass-&ssh-askpass-version;">
  <?dbhtml filename="ssh-askpass.html"?>


  <title>ssh-askpass-&ssh-askpass-version;</title>

  <indexterm zone="ssh-askpass">
    <primary sortas="a-ssh-askpass">ssh-askpass</primary>
  </indexterm>

  <sect2 role="package">
    <title>Introduction to ssh-askpass</title>

  <para>
    The <application>ssh-askpass</application> is a generic executable name for
    many packages, with similar names, that provide a interactive X service to
    grab password for packages requiring administrative privileges to be run.
    It prompts the user with a window box where the necessary password can be
    inserted. Here, we choose Damien Miller's package distributed in the
    <application>OpenSSH</application> tarball.</para>

  &lfs121_checked;

    <bridgehead renderas="sect3">Package Information</bridgehead>
    <itemizedlist spacing="compact">
      <listitem>
        <para>
          Download (HTTP): <ulink url="&ssh-askpass-download-http;"/>
        </para>
      </listitem>
      <listitem>
        <para>
          Download (FTP): <ulink url="&ssh-askpass-download-ftp;"/>
        </para>
      </listitem>
      <listitem>
        <para>
          Download MD5 sum: &ssh-askpass-md5sum;
        </para>
      </listitem>
      <listitem>
        <para>
          Download size: &ssh-askpass-size;
        </para>
      </listitem>
      <listitem>
        <para>
          Estimated disk space required: &ssh-askpass-buildsize;
        </para>
      </listitem>
      <listitem>
        <para>
          Estimated build time: &ssh-askpass-time;
        </para>
      </listitem>
    </itemizedlist>

    <bridgehead renderas="sect3">ssh-askpass Dependencies</bridgehead>

    <bridgehead renderas="sect4">Required</bridgehead>
    <para role="required">
      <xref linkend="gtk3"/>,
      <xref role="runtime" linkend="sudo"/> (runtime),
      <xref linkend="xorg7-lib"/>, and
      <xref role="runtime" linkend="x-window-system"/> (runtime)
    </para>

  </sect2>

  <sect2 role="installation">
    <title>Installation of ssh-askpass</title>

    <para>
      Install <application>ssh-askpass</application> by running the following
      commands:
    </para>

<screen><userinput>cd contrib &amp;&amp;
make gnome-ssh-askpass3</userinput></screen>

    <para>
      Now, as the <systemitem class="username">root</systemitem> user:
    </para>

<screen role="root"><userinput>install -v -d -m755                    /usr/libexec/openssh/contrib  &amp;&amp;
install -v -m755    gnome-ssh-askpass3 /usr/libexec/openssh/contrib  &amp;&amp;
ln -sv -f contrib/gnome-ssh-askpass3   /usr/libexec/openssh/ssh-askpass</userinput></screen>

    <para>
     The use of /usr/libexec/openssh/contrib and a symlink is justified by the
     eventual necessity of a different program for that service.
    </para>

  </sect2>

  <sect2 role="configuration">
    <title>Configuring ssh-askpass</title>

    <sect3 id="ssh-askpass-config">
      <title>Configuration Information</title>

        <para>
          As the <systemitem class="username">root</systemitem> user, configure
          <xref linkend="sudo"/> to use <application>ssh-askpass</application>:
        </para>

<screen role="root"><userinput>cat &gt;&gt; /etc/sudo.conf &lt;&lt; "EOF" &amp;&amp;
<literal># Path to askpass helper program
Path askpass /usr/libexec/openssh/ssh-askpass</literal>
EOF
chmod -v 0644 /etc/sudo.conf</userinput></screen>

        <para>
          If a given graphical &lt;application&gt; requires administrative
          privileges, use <command>sudo -A &lt;application&gt;</command> from an
          x-terminal, from a Window Manager menu and/or replace
          "Exec=&lt;application&gt; ..." by
          "Exec=sudo -A &lt;application&gt; ..." in the
          &lt;application&gt;.desktop file.
        </para>

    </sect3>

  </sect2>

  <sect2 role="content">
    <title>Contents</title>

    <segmentedlist>
      <segtitle>Installed Programs</segtitle>
      <segtitle>Installed Library</segtitle>
      <segtitle>Installed Directory</segtitle>

      <seglistitem>
        <seg>
          gnome-ssh-askpass3, ssh-askpass (symlink to
          <filename>gnome-ssh-askpass3</filename>)
        </seg>
        <seg>
          None
        </seg>
        <seg>
          /usr/libexec/openssh/contrib
        </seg>
      </seglistitem>
    </segmentedlist>

  </sect2>

</sect1>