openssh: Disable privilege separation by patching
[termux-packages] / packages / openssh / build.sh
1 TERMUX_PKG_HOMEPAGE=https://www.openssh.com/
2 TERMUX_PKG_DESCRIPTION="Secure shell for logging into a remote machine"
3 TERMUX_PKG_VERSION=7.5p1
4 TERMUX_PKG_SRCURL=http://mirrors.evowise.com/pub/OpenBSD/OpenSSH/portable/openssh-${TERMUX_PKG_VERSION}.tar.gz
5 TERMUX_PKG_SHA256=9846e3c5fab9f0547400b4d2c017992f914222b3fd1f8eee6c7dc6bc5e59f9f0
6 TERMUX_PKG_DEPENDS="libandroid-support, ldns, openssl, libutil"
7 # --disable-strip to prevent host "install" command to use "-s", which won't work for target binaries:
8 TERMUX_PKG_EXTRA_CONFIGURE_ARGS="
9 --disable-etc-default-login
10 --disable-lastlog
11 --disable-libutil
12 --disable-pututline
13 --disable-pututxline
14 --disable-strip
15 --disable-utmp
16 --disable-utmpx
17 --disable-wtmp
18 --disable-wtmpx
19 --sysconfdir=$TERMUX_PREFIX/etc/ssh
20 --with-cflags=-Dfd_mask=int
21 --with-ldns
22 --without-ssh1
23 --without-stackprotect
24 --with-pid-dir=$TERMUX_PREFIX/var/run
25 --with-privsep-path=$TERMUX_PREFIX/var/empty
26 ac_cv_func_endgrent=yes
27 ac_cv_func_fmt_scaled=no
28 ac_cv_func_getlastlogxbyname=no
29 ac_cv_func_readpassphrase=no
30 ac_cv_func_strnvis=no
31 ac_cv_header_sys_un_h=yes
32 ac_cv_search_getrrsetbyname=no
33 "
34 TERMUX_PKG_MAKE_INSTALL_TARGET="install-nokeys"
35 TERMUX_PKG_RM_AFTER_INSTALL="bin/slogin share/man/man1/slogin.1"
36
37 termux_step_pre_configure() {
38 # We patch configure.ac:
39 cd $TERMUX_PKG_SRCDIR
40 autoreconf
41
42 LD=$CC # Needed to link the binaries
43 LDFLAGS+=" -llog" # liblog for android logging in syslog hack
44 }
45
46 termux_step_post_configure() {
47 # We need to remove this file before installing, since otherwise the
48 # install leaves it alone which means no updated timestamps.
49 rm -Rf $TERMUX_PREFIX/etc/moduli
50 }
51
52 termux_step_post_make_install () {
53 # OpenSSH 7.0 disabled ssh-dss by default, keep it for a while in Termux:
54 echo -e "PasswordAuthentication no\nPubkeyAcceptedKeyTypes +ssh-dss\nSubsystem sftp $TERMUX_PREFIX/libexec/sftp-server" > $TERMUX_PREFIX/etc/ssh/sshd_config
55 echo "PubkeyAcceptedKeyTypes +ssh-dss" > $TERMUX_PREFIX/etc/ssh/ssh_config
56 cp $TERMUX_PKG_BUILDER_DIR/source-ssh-agent.sh $TERMUX_PREFIX/bin/source-ssh-agent
57 cp $TERMUX_PKG_BUILDER_DIR/ssh-with-agent.sh $TERMUX_PREFIX/bin/ssha
58
59 # Install ssh-copy-id:
60 cp $TERMUX_PKG_SRCDIR/contrib/ssh-copy-id.1 $TERMUX_PREFIX/share/man/man1/
61 cp $TERMUX_PKG_SRCDIR/contrib/ssh-copy-id $TERMUX_PREFIX/bin/
62 chmod +x $TERMUX_PREFIX/bin/ssh-copy-id
63
64 mkdir -p $TERMUX_PREFIX/var/run
65 echo "OpenSSH needs this folder to put sshd.pid in" >> $TERMUX_PREFIX/var/run/README.openssh
66
67 mkdir -p $TERMUX_PREFIX/etc/ssh/
68 cp $TERMUX_PKG_SRCDIR/moduli $TERMUX_PREFIX/etc/ssh/moduli
69 }
70
71 termux_step_create_debscripts () {
72 echo "mkdir -p \$HOME/.ssh" > postinst
73 echo "" >> postinst
74 echo "for a in rsa dsa ecdsa ed25519; do" >> postinst
75 echo " KEYFILE=$TERMUX_PREFIX/etc/ssh/ssh_host_\${a}_key" >> postinst
76 echo " test ! -f \$KEYFILE && ssh-keygen -N '' -t \$a -f \$KEYFILE" >> postinst
77 echo "done" >> postinst
78 echo "exit 0" >> postinst
79 chmod 0755 postinst
80 }