Hello community, here is the log from the commit of package installation-images checked in at Wed Apr 18 12:38:57 CEST 2007. -------- --- installation-images/installation-images.changes 2007-04-17 20:25:06.000000000 +0200 +++ /mounts/work_src_done/STABLE/installation-images/installation-images.changes 2007-04-18 12:18:39.000000000 +0200 @@ -1,0 +2,5 @@ +Wed Apr 18 12:18:20 CEST 2007 - snwint@suse.de + +- reworked ssh/sshd config + +------------------------------------------------------------------- Old: ---- installation-images-9.63.diff installation-images-9.63.tar.bz2 New: ---- installation-images-9.64.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ installation-images.spec ++++++ --- /var/tmp/diff_new_pack.GC8946/_old 2007-04-18 12:38:44.000000000 +0200 +++ /var/tmp/diff_new_pack.GC8946/_new 2007-04-18 12:38:44.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package installation-images (Version 9.63) +# spec file for package installation-images (Version 9.64) # # Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine @@ -16,7 +16,7 @@ BuildRequires: aaa_base audit-libs boost busybox checkmedia dejavu dmapi dosfstools ethtool evms fvwm2 hfsutils kernel-binary-packages libelf libicu libzypp open-iscsi openct pciutils pcsc-lite perl-HTML-Parser resmgr sqlite-zmd util-linux util-linux-crypto BuildRequires: bootsplash-theme-SuSE-NLD gpg jfsutils sax2-tools sqlite suse-build-key yast2-iscsi-client yast2-ncurses BuildRequires: tightvnc xkeyboard-config xmset xorg-x11 xorg-x11-Xnest xorg-x11-Xvfb xorg-x11-fonts xorg-x11-fonts-core xorg-x11-libICE xorg-x11-libSM xorg-x11-libX11 xorg-x11-libXau xorg-x11-libXdmcp xorg-x11-libXext xorg-x11-libXfixes xorg-x11-libXmu xorg-x11-libXp xorg-x11-libXpm xorg-x11-libXrender xorg-x11-libXt xorg-x11-libfontenc xorg-x11-libxcb xorg-x11-libxkbfile xterm -BuildRequires: cracklib libbz2 libreiserfs libreiserfs-devel module-init-tools parted procinfo procps psmisc strace unfonts vim +BuildRequires: cracklib curl libbz2 libreiserfs libreiserfs-devel module-init-tools parted procinfo procps psmisc strace unfonts vim %ifnarch ia64 BuildRequires: ltrace %endif @@ -66,10 +66,9 @@ Obsoletes: y2image Autoreqprov: off Summary: Installation Image Files -Version: 9.63 -Release: 5 -Source: installation-images-9.63.tar.bz2 -Patch: installation-images-9.63.diff +Version: 9.64 +Release: 1 +Source: installation-images-9.64.tar.bz2 BuildRoot: %{_tmppath}/%{name}-%{version}-build %define _binary_payload w.ufdio @@ -81,7 +80,6 @@ %prep %setup -%patch %build # files go to CD1/boot/$boot_arch/ @@ -325,6 +323,8 @@ /CD1 %changelog +* Wed Apr 18 2007 - snwint@suse.de +- reworked ssh/sshd config * Tue Apr 17 2007 - schwab@suse.de - libcurl moved to libcurl4. - guessfstype is gone. ++++++ installation-images-9.63.tar.bz2 -> installation-images-9.64.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/installation-images-9.63/Changelog new/installation-images-9.64/Changelog --- old/installation-images-9.63/Changelog 2007-04-03 15:16:43.000000000 +0200 +++ new/installation-images-9.64/Changelog 2007-04-18 12:16:47.000000000 +0200 @@ -1,3 +1,8 @@ +18/4/2007: v9.64 + - reworked ssh/sshd config + - libcurl4 needed + - guessfstype gone + 3/4/2007: v9.63 - remove unused coff support from ppc32, boot image cant fit into 4MB - readd sd_mod and sr_mod on ppc32 diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/installation-images-9.63/data/initrd/initrd_base.file_list new/installation-images-9.64/data/initrd/initrd_base.file_list --- old/installation-images-9.63/data/initrd/initrd_base.file_list 2007-03-21 11:59:23.000000000 +0100 +++ new/installation-images-9.64/data/initrd/initrd_base.file_list 2007-04-17 16:15:30.000000000 +0200 @@ -2,6 +2,7 @@ d var/run var/spool var/lock var/tmp var/log/YaST2 var/adm/mount d var/lib/YaST2 var/lib/dhcpcd var/lib/hardware/unique-keys var/lib/autoinstall d var/run/dbus var/run/hal var/run/hotplug var/cache/fontconfig +d var/lib/sshd var/lib/empty d etc/sysconfig d etc/sysconfig/hardware @@ -415,6 +416,8 @@ curl: /usr/bin/curl + +libcurl4: /usr/lib*/libcurl.so.* libidn: diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/installation-images-9.63/data/rescue/rescue.file_list new/installation-images-9.64/data/rescue/rescue.file_list --- old/installation-images-9.63/data/rescue/rescue.file_list 2007-04-03 15:16:02.000000000 +0200 +++ new/installation-images-9.64/data/rescue/rescue.file_list 2007-04-18 11:19:32.000000000 +0200 @@ -423,6 +423,7 @@ /{etc,bin} /usr/bin /usr/sbin/pwunconv + /usr/sbin/chpasswd /usr/lib*/pwdutils/liblog_syslog.so.* openldap2-client: @@ -476,7 +477,7 @@ util-linux: postin /etc - /bin/{dmesg,logger,mount,umount,guessfstype} + /bin/{dmesg,logger,mount,umount} if arch ne 's390' && arch ne 's390x' /sbin/hwclock endif @@ -639,11 +640,19 @@ openct: /usr/lib*/libopenct.so* -openssh: +openssh: prein /etc/ssh + /etc/pam.d/sshd + /etc/init.d/sshd + d /etc/sysconfig + t /etc/sysconfig/ssh /usr/bin /usr/sbin/sshd /usr/lib* + /var/lib + e save_cfg etc/passwd etc/shadow etc/group + e prein + e restore_cfg etc/passwd etc/shadow etc/group dhcpcd: /sbin diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/installation-images-9.63/data/root/etc/inst_setup_ssh new/installation-images-9.64/data/root/etc/inst_setup_ssh --- old/installation-images-9.63/data/root/etc/inst_setup_ssh 2007-01-19 17:08:48.000000000 +0100 +++ new/installation-images-9.64/data/root/etc/inst_setup_ssh 2007-04-17 16:18:35.000000000 +0200 @@ -35,9 +35,6 @@ cp -a --remove-destination $INSTSYS/root/.bash_history /root cp -a --remove-destination $INSTSYS/root/.vimrc /root cp -a --remove-destination $INSTSYS/etc/ssh/{moduli,primes,ssh*config*} /etc/ssh -# not needed in initrd -grep -vi UsePrivilegeSeparation < $INSTSYS/etc/ssh/sshd_config > /etc/ssh/sshd_config -echo UsePrivilegeSeparation no >> /etc/ssh/sshd_config # if test ! -z "$nameserver" ; then echo "nameserver $nameserver" >> /etc/resolv.conf diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/installation-images-9.63/data/root/etc/ssh/ssh_config new/installation-images-9.64/data/root/etc/ssh/ssh_config --- old/installation-images-9.63/data/root/etc/ssh/ssh_config 2004-08-06 11:33:28.000000000 +0200 +++ new/installation-images-9.64/data/root/etc/ssh/ssh_config 1970-01-01 01:00:00.000000000 +0100 @@ -1,35 +0,0 @@ -# $OpenBSD: ssh_config,v 1.10 2001/04/03 21:19:38 todd Exp $ - -# This is ssh client systemwide configuration file. See ssh(1) for more -# information. This file provides defaults for users, and the values can -# be changed in per-user configuration files or on the command line. - -# Configuration data is parsed as follows: -# 1. command line options -# 2. user-specific file -# 3. system-wide file -# Any configuration value is only changed the first time it is set. -# Thus, host-specific definitions should be at the beginning of the -# configuration file, and defaults at the end. - -# Site-wide defaults for various options - -Host * -# ForwardAgent no -# ForwardX11 no -# RhostsAuthentication no -# RhostsRSAAuthentication yes -# RSAAuthentication yes -# PasswordAuthentication yes -# FallBackToRsh no -# UseRsh no -# BatchMode no -# CheckHostIP yes -# StrictHostKeyChecking yes -# IdentityFile ~/.ssh/identity -# IdentityFile ~/.ssh/id_dsa -# IdentityFile ~/.ssh/id_rsa -# Port 22 - Protocol 1,2 -# Cipher blowfish -# EscapeChar ~ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/installation-images-9.63/data/root/etc/ssh/sshd_config new/installation-images-9.64/data/root/etc/ssh/sshd_config --- old/installation-images-9.63/data/root/etc/ssh/sshd_config 2004-08-06 11:33:28.000000000 +0200 +++ new/installation-images-9.64/data/root/etc/ssh/sshd_config 1970-01-01 01:00:00.000000000 +0100 @@ -1,71 +0,0 @@ -# $OpenBSD: sshd_config,v 1.38 2001/04/15 21:41:29 deraadt Exp $ - -# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin - -# This is the sshd server system-wide configuration file. See sshd(8) -# for more information. - -Port 22 -Protocol 1,2 -#ListenAddress 0.0.0.0 -#ListenAddress :: -HostKey /etc/ssh/ssh_host_key -#HostKey /etc/ssh/ssh_host_rsa_key -HostKey /etc/ssh/ssh_host_dsa_key -ServerKeyBits 768 -LoginGraceTime 600 -KeyRegenerationInterval 3600 -PermitRootLogin yes -# -# Don't read ~/.rhosts and ~/.shosts files -IgnoreRhosts yes -# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication -#IgnoreUserKnownHosts yes -StrictModes yes -X11Forwarding yes -X11DisplayOffset 10 -PrintMotd yes -#PrintLastLog no -KeepAlive yes - -# Logging -SyslogFacility AUTH -LogLevel INFO -#obsoletes QuietMode and FascistLogging - -# -# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts -RhostsRSAAuthentication no -# similar for protocol version 2 -HostbasedAuthentication no -# -RSAAuthentication yes - -# To disable tunneled clear text passwords, change to no here! -PasswordAuthentication yes -PermitEmptyPasswords no - -# Uncomment to disable s/key passwords -ChallengeResponseAuthentication no - -# Uncomment to enable PAM keyboard-interactive authentication -# Warning: enabling this may bypass the setting of 'PasswordAuthentication' -#PAMAuthenticationViaKbdInt yes - -# To change Kerberos options -#KerberosAuthentication no -#KerberosOrLocalPasswd yes -#AFSTokenPassing no -#KerberosTicketCleanup no - -# Kerberos TGT Passing does only work with the AFS kaserver -#KerberosTgtPassing yes - -#CheckMail yes -#UseLogin no - -#MaxStartups 10:30:60 -#Banner /etc/issue.net -#ReverseMappingCheck yes - -Subsystem sftp /usr/lib/ssh/sftp-server diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/installation-images-9.63/data/root/root.file_list new/installation-images-9.64/data/root/root.file_list --- old/installation-images-9.63/data/root/root.file_list 2007-03-26 15:03:06.000000000 +0200 +++ new/installation-images-9.64/data/root/root.file_list 2007-04-18 12:15:37.000000000 +0200 @@ -8,8 +8,7 @@ # add some /etc files x /etc/* /etc -r /etc/ssh/CVS -r /etc/CVS /etc/rpm/CVS /root/.ssh/CVS +r /etc/ssh r /etc/inst_setup r /etc/inst_setup_ssh r /etc/create_interface @@ -142,7 +141,6 @@ /usr/lib*/librpm*.so util-linux: - /bin/guessfstype /bin/{u,}mount /bin/dmesg /bin/logger @@ -416,8 +414,9 @@ gpart: /usr/bin - curl: + libcurl4: /usr/lib*/libcurl.so* + resmgr: /lib*/libresmgr.so.* @@ -559,13 +558,11 @@ /usr/lib*/libopenct.so* openssh: prein - /etc/init.d/sshd - /etc/pam.d/sshd /etc/ssh + /etc/pam.d/sshd + /usr/bin /usr/sbin/sshd - /usr/bin/ssh - /usr/bin/ssh-keygen - /usr/bin/scp + /usr/lib* e prein krb5: @@ -590,9 +587,12 @@ pam: /etc/pam.d + /etc /lib*/security /lib*/libpam.so.* /lib*/libpam_misc.so.* + /lib* + /sbin audit-libs: /lib*/libaudit.so.* @@ -613,8 +613,8 @@ x etc/inst_setup_ssh /sbin/ c 755 0 0 /sbin/inst_setup_ssh - x etc/ssh /etc - c 644 0 0 /etc/ssh/* +# x etc/ssh /etc +# c 644 0 0 /etc/ssh/* d /root x root/.yast2 /root x root/.bash_history /root diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/installation-images-9.63/etc/module.config new/installation-images-9.64/etc/module.config --- old/installation-images-9.63/etc/module.config 2007-04-02 17:40:26.000000000 +0200 +++ new/installation-images-9.64/etc/module.config 2007-04-16 16:52:25.000000000 +0200 @@ -80,6 +80,8 @@ scsi_transport_spi st,-SCSI Tape Driver,- sunrpc,-,- +cbc,-,- +blkcipher,-,- twofish twofish_common twofish-i586 diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/installation-images-9.63/etc/module.list new/installation-images-9.64/etc/module.list --- old/installation-images-9.63/etc/module.list 2007-02-14 15:18:28.000000000 +0100 +++ new/installation-images-9.64/etc/module.list 2007-04-16 16:51:46.000000000 +0200 @@ -108,6 +108,8 @@ kernel/lib/crc-ccitt.ko kernel/lib/libcrc32c.ko +kernel/crypto/cbc.ko +kernel/crypto/blkcipher.ko kernel/crypto/crc32c.ko kernel/crypto/twofish.ko kernel/crypto/twofish_common.ko diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/installation-images-9.63/VERSION new/installation-images-9.64/VERSION --- old/installation-images-9.63/VERSION 2007-04-03 15:16:21.000000000 +0200 +++ new/installation-images-9.64/VERSION 2007-04-18 12:14:46.000000000 +0200 @@ -1 +1 @@ -9.63 +9.64 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org
participants (1)
-
root@Hilbert.suse.de