11305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood#!/bin/sh 21305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 31305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# buildbff.sh: Create AIX SMIT-installable OpenSSH packages 41305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# $Id: buildbff.sh,v 1.13 2011/05/05 03:48:41 djm Exp $ 51305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 61305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Author: Darren Tucker (dtucker at zip dot com dot au) 71305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# This file is placed in the public domain and comes with absolutely 81305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# no warranty. 91305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 101305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Based originally on Ben Lindstrom's buildpkg.sh for Solaris 111305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 121305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 131305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 141305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Tunable configuration settings 151305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# create a "config.local" in your build directory or set 161305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# environment variables to override these. 171305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 181305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood[ -z "$PERMIT_ROOT_LOGIN" ] && PERMIT_ROOT_LOGIN=no 191305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood[ -z "$X11_FORWARDING" ] && X11_FORWARDING=no 201305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood[ -z "$AIX_SRC" ] && AIX_SRC=no 211305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 221305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodumask 022 231305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 241305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodstartdir=`pwd` 251305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 261305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodperl -v >/dev/null || (echo perl required; exit 1) 271305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 281305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Path to inventory.sh: same place as buildbff.sh 291305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif echo $0 | egrep '^/' 301305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 311305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood inventory=`dirname $0`/inventory.sh # absolute path 321305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodelse 331305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood inventory=`pwd`/`dirname $0`/inventory.sh # relative path 341305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 351305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 361305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 371305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# We still support running from contrib/aix, but this is deprecated 381305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 391305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif pwd | egrep 'contrib/aix$' 401305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 411305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "Changing directory to `pwd`/../.." 421305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "Please run buildbff.sh from your build directory in future." 431305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood cd ../.. 441305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood contribaix=1 451305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 461305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 471305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif [ ! -f Makefile ] 481305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 491305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "Makefile not found (did you run configure?)" 501305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood exit 1 511305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 521305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 531305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 541305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Directories used during build: 551305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# current dir = $objdir directory you ran ./configure in. 561305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# $objdir/$PKGDIR/ directory package files are constructed in 571305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# $objdir/$PKGDIR/root/ package root ($FAKE_ROOT) 581305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 591305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodobjdir=`pwd` 601305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodPKGNAME=openssh 611305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodPKGDIR=package 621305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 631305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 641305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Collect local configuration settings to override defaults 651305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 661305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif [ -s ./config.local ] 671305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 681305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo Reading local settings from config.local 691305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood . ./config.local 701305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 711305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 721305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 731305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Fill in some details from Makefile, like prefix and sysconfdir 741305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# the eval also expands variables like sysconfdir=${prefix}/etc 751305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# provided they are eval'ed in the correct order 761305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 771305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfor confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir mansubdir sysconfdir piddir srcdir 781305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddo 791305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood eval $confvar=`grep "^$confvar=" $objdir/Makefile | cut -d = -f 2` 801305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddone 811305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 821305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 831305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Collect values of privsep user and privsep path 841305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# currently only found in config.h 851305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 861305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfor confvar in SSH_PRIVSEP_USER PRIVSEP_PATH 871305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddo 881305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' $objdir/config.h` 891305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddone 901305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 911305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Set privsep defaults if not defined 921305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif [ -z "$SSH_PRIVSEP_USER" ] 931305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 941305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood SSH_PRIVSEP_USER=sshd 951305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 961305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif [ -z "$PRIVSEP_PATH" ] 971305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 981305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood PRIVSEP_PATH=/var/empty 991305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 1001305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1011305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Clean package build directory 1021305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodrm -rf $objdir/$PKGDIR 1031305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodFAKE_ROOT=$objdir/$PKGDIR/root 1041305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodmkdir -p $FAKE_ROOT 1051305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1061305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Start by faking root install 1071305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho "Faking root install..." 1081305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodcd $objdir 1091305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodmake install-nokeys DESTDIR=$FAKE_ROOT 1101305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1111305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif [ $? -gt 0 ] 1121305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 1131305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "Fake root install failed, stopping." 1141305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood exit 1 1151305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 1161305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1171305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1181305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Copy informational files to include in package 1191305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1201305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodcp $srcdir/LICENCE $objdir/$PKGDIR/ 1211305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodcp $srcdir/README* $objdir/$PKGDIR/ 1221305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1231305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1241305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Extract common info requires for the 'info' part of the package. 1251305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# AIX requires 4-part version numbers 1261305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1271305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodVERSION=`./ssh -V 2>&1 | cut -f 1 -d , | cut -f 2 -d _` 1281305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodMAJOR=`echo $VERSION | cut -f 1 -d p | cut -f 1 -d .` 1291305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodMINOR=`echo $VERSION | cut -f 1 -d p | cut -f 2 -d .` 1301305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodPATCH=`echo $VERSION | cut -f 1 -d p | cut -f 3 -d .` 1311305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodPORTABLE=`echo $VERSION | awk 'BEGIN{FS="p"}{print $2}'` 1321305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood[ "$PATCH" = "" ] && PATCH=0 1331305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood[ "$PORTABLE" = "" ] && PORTABLE=0 1341305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodBFFVERSION=`printf "%d.%d.%d.%d" $MAJOR $MINOR $PATCH $PORTABLE` 1351305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1361305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho "Building BFF for $PKGNAME $VERSION (package version $BFFVERSION)" 1371305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1381305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1391305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Set ssh and sshd parameters as per config.local 1401305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1411305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif [ "${PERMIT_ROOT_LOGIN}" = no ] 1421305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 1431305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \ 1441305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood $FAKE_ROOT/${sysconfdir}/sshd_config 1451305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 1461305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif [ "${X11_FORWARDING}" = yes ] 1471305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 1481305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \ 1491305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood $FAKE_ROOT/${sysconfdir}/sshd_config 1501305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 1511305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1521305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1531305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Rename config files; postinstall script will copy them if necessary 1541305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfor cfgfile in ssh_config sshd_config 1551305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddo 1561305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood mv $FAKE_ROOT/$sysconfdir/$cfgfile $FAKE_ROOT/$sysconfdir/$cfgfile.default 1571305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddone 1581305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1591305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1601305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Generate lpp control files. 1611305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# working dir is $FAKE_ROOT but files are generated in dir above 1621305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# and moved into place just before creation of .bff 1631305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1641305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodcd $FAKE_ROOT 1651305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho Generating LPP control files 1661305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfind . ! -name . -print >../openssh.al 1671305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood$inventory >../openssh.inventory 1681305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1691305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodcat <<EOD >../openssh.copyright 1701305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodThis software is distributed under a BSD-style license. 1711305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodFor the full text of the license, see /usr/lpp/openssh/LICENCE 1721305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodEOD 1731305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1741305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1751305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# openssh.size file allows filesystem expansion as required 1761305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# generate list of directories containing files 1771305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# then calculate disk usage for each directory and store in openssh.size 1781305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1791305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfiles=`find . -type f -print` 1801305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddirs=`for file in $files; do dirname $file; done | sort -u` 1811305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfor dir in $dirs 1821305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddo 1831305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood du $dir 1841305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddone > ../openssh.size 1851305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1861305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1871305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Create postinstall script 1881305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 1891305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodcat <<EOF >>../openssh.post_i 1901305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood#!/bin/sh 1911305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 1921305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho Creating configs from defaults if necessary. 1931305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfor cfgfile in ssh_config sshd_config 1941305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddo 1951305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood if [ ! -f $sysconfdir/\$cfgfile ] 1961305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood then 1971305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "Creating \$cfgfile from default" 1981305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood cp $sysconfdir/\$cfgfile.default $sysconfdir/\$cfgfile 1991305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood else 2001305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "\$cfgfile already exists." 2011305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood fi 2021305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddone 2031305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho 2041305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 2051305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Create PrivilegeSeparation user and group if not present 2061305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho Checking for PrivilegeSeparation user and group. 2071305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif cut -f1 -d: /etc/group | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null 2081305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 2091305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "PrivSep group $SSH_PRIVSEP_USER already exists." 2101305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodelse 2111305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "Creating PrivSep group $SSH_PRIVSEP_USER." 2121305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood mkgroup -A $SSH_PRIVSEP_USER 2131305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 2141305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 2151305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Create user if required 2161305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif lsuser "$SSH_PRIVSEP_USER" >/dev/null 2171305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 2181305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "PrivSep user $SSH_PRIVSEP_USER already exists." 2191305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodelse 2201305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "Creating PrivSep user $SSH_PRIVSEP_USER." 2211305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood mkuser gecos='SSHD PrivSep User' login=false rlogin=false account_locked=true pgrp=$SSH_PRIVSEP_USER $SSH_PRIVSEP_USER 2221305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 2231305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 2241305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif egrep '^[ \t]*UsePrivilegeSeparation[ \t]+no' $sysconfdir/sshd_config >/dev/null 2251305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 2261305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo UsePrivilegeSeparation not enabled, privsep directory not required. 2271305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodelse 2281305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood # create chroot directory if required 2291305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood if [ -d $PRIVSEP_PATH ] 2301305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood then 2311305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "PrivSep chroot directory $PRIVSEP_PATH already exists." 2321305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood else 2331305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "Creating PrivSep chroot directory $PRIVSEP_PATH." 2341305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood mkdir $PRIVSEP_PATH 2351305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood chown 0 $PRIVSEP_PATH 2361305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood chgrp 0 $PRIVSEP_PATH 2371305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood chmod 755 $PRIVSEP_PATH 2381305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood fi 2391305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 2401305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho 2411305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 2421305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Generate keys unless they already exist 2431305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho Creating host keys if required. 2441305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif [ -f "$sysconfdir/ssh_host_key" ] ; then 2451305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "$sysconfdir/ssh_host_key already exists, skipping." 2461305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodelse 2471305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood $bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N "" 2481305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 2491305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif [ -f $sysconfdir/ssh_host_dsa_key ] ; then 2501305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "$sysconfdir/ssh_host_dsa_key already exists, skipping." 2511305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodelse 2521305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood $bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N "" 2531305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 2541305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif [ -f $sysconfdir/ssh_host_rsa_key ] ; then 2551305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "$sysconfdir/ssh_host_rsa_key already exists, skipping." 2561305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodelse 2571305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood $bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N "" 2581305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 2591305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho 2601305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 2611305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Set startup command depending on SRC support 2621305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif [ "$AIX_SRC" = "yes" ] 2631305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 2641305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo Creating SRC sshd subsystem. 2651305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood rmssys -s sshd 2>&1 >/dev/null 2661305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood mkssys -s sshd -p "$sbindir/sshd" -a '-D' -u 0 -S -n 15 -f 9 -R -G tcpip 2671305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood startupcmd="start $sbindir/sshd \\\"\\\$src_running\\\"" 2681305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood oldstartcmd="$sbindir/sshd" 2691305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodelse 2701305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood startupcmd="$sbindir/sshd" 2711305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood oldstartcmd="start $sbindir/sshd \\\"$src_running\\\"" 2721305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 2731305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 2741305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# If migrating to or from SRC, change previous startup command 2751305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# otherwise add to rc.tcpip 2761305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodif egrep "^\$oldstartcmd" /etc/rc.tcpip >/dev/null 2771305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodthen 2781305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood if sed "s|^\$oldstartcmd|\$startupcmd|g" /etc/rc.tcpip >/etc/rc.tcpip.new 2791305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood then 2801305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood chmod 0755 /etc/rc.tcpip.new 2811305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood mv /etc/rc.tcpip /etc/rc.tcpip.old && \ 2821305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood mv /etc/rc.tcpip.new /etc/rc.tcpip 2831305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood else 2841305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "Updating /etc/rc.tcpip failed, please check." 2851305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood fi 2861305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodelse 2871305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood # Add to system startup if required 2881305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood if grep "^\$startupcmd" /etc/rc.tcpip >/dev/null 2891305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood then 2901305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "sshd found in rc.tcpip, not adding." 2911305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood else 2921305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "Adding sshd to rc.tcpip" 2931305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo >>/etc/rc.tcpip 2941305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "# Start sshd" >>/etc/rc.tcpip 2951305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "\$startupcmd" >>/etc/rc.tcpip 2961305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood fi 2971305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfi 2981305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodEOF 2991305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 3001305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 3011305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Create liblpp.a and move control files into it 3021305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 3031305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho Creating liblpp.a 3041305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood( 3051305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood cd .. 3061305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood for i in openssh.al openssh.copyright openssh.inventory openssh.post_i openssh.size LICENCE README* 3071305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood do 3081305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood ar -r liblpp.a $i 3091305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood rm $i 3101305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood done 3111305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood) 3121305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 3131305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 3141305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Create lpp_name 3151305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 3161305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# This will end up looking something like: 3171305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 4 R I OpenSSH { 3181305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# OpenSSH 3.0.2.1 1 N U en_US OpenSSH 3.0.2p1 Portable for AIX 3191305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# [ 3201305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# % 3211305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# /usr/local/bin 8073 3221305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# /usr/local/etc 189 3231305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# /usr/local/libexec 185 3241305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# /usr/local/man/man1 145 3251305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# /usr/local/man/man8 83 3261305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# /usr/local/sbin 2105 3271305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# /usr/local/share 3 3281305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# % 3291305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# ] 3301305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# } 3311305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 3321305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho Creating lpp_name 3331305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodcat <<EOF >../lpp_name 3341305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood4 R I $PKGNAME { 3351305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood$PKGNAME $BFFVERSION 1 N U en_US OpenSSH $VERSION Portable for AIX 3361305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood[ 3371305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood% 3381305e95ba6ff9fa202d0818caf10405df4b0f648Mike LockwoodEOF 3391305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 3401305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodfor i in $bindir $sysconfdir $libexecdir $mandir/${mansubdir}1 $mandir/${mansubdir}8 $sbindir $datadir /usr/lpp/openssh 3411305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddo 3421305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood # get size in 512 byte blocks 3431305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood if [ -d $FAKE_ROOT/$i ] 3441305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood then 3451305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood size=`du $FAKE_ROOT/$i | awk '{print $1}'` 3461305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "$i $size" >>../lpp_name 3471305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood fi 3481305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwooddone 3491305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 3501305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho '%' >>../lpp_name 3511305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho ']' >>../lpp_name 3521305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho '}' >>../lpp_name 3531305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 3541305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 3551305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Move pieces into place 3561305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 3571305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodmkdir -p usr/lpp/openssh 3581305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodmv ../liblpp.a usr/lpp/openssh 3591305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodmv ../lpp_name . 3601305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 3611305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 3621305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Now invoke backup to create .bff file 3631305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# note: lpp_name needs to be the first file so we generate the 3641305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# file list on the fly and feed it to backup using -i 3651305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 3661305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho Creating $PKGNAME-$VERSION.bff with backup... 3671305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodrm -f $PKGNAME-$VERSION.bff 3681305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood( 3691305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood echo "./lpp_name" 3701305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood find . ! -name lpp_name -a ! -name . -print 3711305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood) | backup -i -q -f ../$PKGNAME-$VERSION.bff $filelist 3721305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 3731305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 3741305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# Move package into final location and clean up 3751305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood# 3761305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodmv ../$PKGNAME-$VERSION.bff $startdir 3771305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodcd $startdir 3781305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodrm -rf $objdir/$PKGDIR 3791305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 3801305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwoodecho $0: done. 3811305e95ba6ff9fa202d0818caf10405df4b0f648Mike Lockwood 382