All of lore.kernel.org
 help / color / mirror / Atom feed
From: Matt Weber <matthew.weber@rockwellcollins.com>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH 25/30] openssh: selinux and pam support
Date: Mon, 15 Dec 2014 21:54:17 -0600	[thread overview]
Message-ID: <1418702062-61039-26-git-send-email-matthew.weber@rockwellcollins.com> (raw)
In-Reply-To: <1418702062-61039-1-git-send-email-matthew.weber@rockwellcollins.com>

Signed-off-by: Matt Weber <matthew.weber@rockwellcollins.com>
---
 package/openssh/openssh.mk | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/package/openssh/openssh.mk b/package/openssh/openssh.mk
index d08b468..2488e59 100644
--- a/package/openssh/openssh.mk
+++ b/package/openssh/openssh.mk
@@ -23,9 +23,21 @@ endif
 
 OPENSSH_DEPENDENCIES = zlib openssl
 
+define OPENSSH_INSTALL_PAM_CONF
+	$(INSTALL) -D -m 644 $(@D)/contrib/sshd.pam.generic $(TARGET_DIR)/etc/pam.d/sshd
+	sed -i '/password   required     \/lib\/security\/pam_cracklib.so/d' $(TARGET_DIR)/etc/pam.d/sshd
+	sed -i -e 's/\#UsePAM no/UsePAM yes/' $(TARGET_DIR)/etc/ssh/sshd_config
+endef
+
 ifeq ($(BR2_PACKAGE_LINUX_PAM),y)
 OPENSSH_DEPENDENCIES += linux-pam
 OPENSSH_CONF_OPTS += --with-pam
+OPENSSH_POST_INSTALL_TARGET_HOOKS += OPENSSH_INSTALL_PAM_CONF
+endif
+
+ifeq ($(BR2_PACKAGE_LIBSELINUX),y)
+OPENSSH_DEPENDENCIES += libselinux
+OPENSSH_CONF_OPTS += --with-selinux
 endif
 
 define OPENSSH_INSTALL_INIT_SYSTEMD
-- 
1.9.1

  parent reply	other threads:[~2014-12-16  3:54 UTC|newest]

Thread overview: 40+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2014-12-16  3:53 [Buildroot] [PATCH 00/29] SELinux Buildroot Additions Matt Weber
2014-12-16  3:53 ` [Buildroot] [PATCH 01/30] libselinux: new package Matt Weber
2015-01-01 19:45   ` Thomas Petazzoni
2014-12-16  3:53 ` [Buildroot] [PATCH 02/30] ustr: " Matt Weber
2015-01-01 20:10   ` Thomas Petazzoni
2014-12-16  3:53 ` [Buildroot] [PATCH 03/30] libsemanage: " Matt Weber
2015-01-01 21:43   ` Thomas Petazzoni
2014-12-16  3:53 ` [Buildroot] [PATCH 04/30] checkpolicy: " Matt Weber
2014-12-16  3:53 ` [Buildroot] [PATCH 05/30] sepolgen: " Matt Weber
2014-12-16  3:53 ` [Buildroot] [PATCH 06/30] sqlite: Add host build support Matt Weber
2014-12-16  3:53 ` [Buildroot] [PATCH 07/30] setools: new package Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 08/30] python-pyparsing: Add host build option Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 09/30] audit: new package Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 10/30] policycoreutils: " Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 11/30] python-pyxml: " Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 12/30] refpolicy: " Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 13/30] repolicy: base policy modifications for embedded target Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 14/30] refpolicy: custom git repo Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 15/30] shadow: new package Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 16/30] busybox: applets as individual binaries Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 17/30] busybox: selinux support Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 18/30] busybox: added linux-pam support Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 19/30] busybox: default selinux config which disables init and uses sysvinit Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 20/30] qemu_x86_selinux_defconfig: base SELinux QEMU image for x86 Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 21/30] linux-pam: selinux support Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 22/30] sysvinit: added libselinux dependency Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 23/30] dbus: selinux file context support Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 24/30] logrotate: selinux support Matt Weber
2014-12-16  3:54 ` Matt Weber [this message]
2014-12-16  3:54 ` [Buildroot] [PATCH 26/30] util-linux: selinux, audit, and pam support Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 27/30] vim: selinux support Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 28/30] rsyslog: fix config file comment style Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 29/30] qemu x86 readme: documented selinux target Matt Weber
2014-12-16  3:54 ` [Buildroot] [PATCH 30/30] readline: host support for host-sqlite Matt Weber
2015-01-01 21:47 ` [Buildroot] [PATCH 00/29] SELinux Buildroot Additions Thomas Petazzoni
2015-01-02 20:59   ` Matthew Weber
2015-01-06  3:15     ` Matthew Weber
2015-01-06  3:37       ` Matthew Weber
2015-01-06  8:34         ` Thomas Petazzoni
2015-01-06 13:53           ` Matthew Weber

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1418702062-61039-26-git-send-email-matthew.weber@rockwellcollins.com \
    --to=matthew.weber@rockwellcollins.com \
    --cc=buildroot@busybox.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.