Changeset 1a3d7fb2 for postlfs/security

Timestamp:

06/02/2021 04:56:14 AM (3 years ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

11.0, 11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

6f2d3c3

Parents:

29e0d9d6

git-author:

Xi Ruoyao <xry111@…> (06/02/2021 04:55:28 AM)

git-committer:

Xi Ruoyao <xry111@…> (06/02/2021 04:56:14 AM)

Message:

openssh: merge /usr, and stop using deprecated /var/run

File:

• postlfs/security/openssh.xml (modified) (2 diffs)

postlfs/security/openssh.xml

@@ -169 +169 @@
     </para>
 
-<screen><userinput>./configure --prefix=/usr                     \
-            --sysconfdir=/etc/ssh             \
-            --with-md5-passwords              \
-            --with-privsep-path=/var/lib/sshd &amp;&amp;
+<screen><userinput>./configure --prefix=/usr                            \
+            --sysconfdir=/etc/ssh                    \
+            --with-md5-passwords                     \
+            --with-privsep-path=/var/lib/sshd        \
+            --with-default-path=/usr/bin             \
+            --with-superuser-path=/usr/sbin:/usr/bin \
+            --with-pid-dir=/run
 make</userinput></screen>
 
@@ -232 +235 @@
       <parameter>--with-md5-passwords</parameter>: This enables the use of MD5
       passwords.
+    </para>
+
+    <para>
+      <parameter>--with-default-path=/usr/bin</parameter> and
+      <parameter>--with-superuser-path=/usr/sbin:/usr/bin</parameter>:
+      These set <envar>PATH</envar> consistent with LFS and BLFS
+      <application>Shadow</application> package.
+    </para>
+
+    <para>
+      <parameter>--with-pid-dir=/run</parameter>: This prevents
+      <application>OpenSSH</application> from refering to deprecated
+      <filename class="directory">/var/run</filename>.
     </para>