diff options
author | Colin Watson <cjwatson@debian.org> | 2007-12-24 10:29:57 +0000 |
---|---|---|
committer | Colin Watson <cjwatson@debian.org> | 2007-12-24 10:29:57 +0000 |
commit | c3e531b12b2335b7fa5a6bcc9a309d3c523ff64b (patch) | |
tree | b72c0867348e7e7914d64af6fc5e25c728922e03 /configure | |
parent | 6b222fdf3cb54c11a446df38e027fe7acf2220cb (diff) | |
parent | 70847d299887abb96f8703ca99db6d817b78960e (diff) |
* New upstream release (closes: #453367).
- CVE-2007-4752: Prevent ssh(1) from using a trusted X11 cookie if
creation of an untrusted cookie fails; found and fixed by Jan Pechanec
(closes: #444738).
- sshd(8) in new installations defaults to SSH Protocol 2 only. Existing
installations are unchanged.
- The SSH channel window size has been increased, and both ssh(1)
sshd(8) now send window updates more aggressively. These improves
performance on high-BDP (Bandwidth Delay Product) networks.
- ssh(1) and sshd(8) now preserve MAC contexts between packets, which
saves 2 hash calls per packet and results in 12-16% speedup for
arcfour256/hmac-md5.
- A new MAC algorithm has been added, UMAC-64 (RFC4418) as
"umac-64@openssh.com". UMAC-64 has been measured to be approximately
20% faster than HMAC-MD5.
- Failure to establish a ssh(1) TunnelForward is now treated as a fatal
error when the ExitOnForwardFailure option is set.
- ssh(1) returns a sensible exit status if the control master goes away
without passing the full exit status.
- When using a ProxyCommand in ssh(1), set the outgoing hostname with
gethostname(2), allowing hostbased authentication to work.
- Make scp(1) skip FIFOs rather than hanging (closes: #246774).
- Encode non-printing characters in scp(1) filenames. These could cause
copies to be aborted with a "protocol error".
- Handle SIGINT in sshd(8) privilege separation child process to ensure
that wtmp and lastlog records are correctly updated.
- Report GSSAPI mechanism in errors, for libraries that support multiple
mechanisms.
- Improve documentation for ssh-add(1)'s -d option.
- Rearrange and tidy GSSAPI code, removing server-only code being linked
into the client.
- Delay execution of ssh(1)'s LocalCommand until after all forwardings
have been established.
- In scp(1), do not truncate non-regular files.
- Improve exit message from ControlMaster clients.
- Prevent sftp-server(8) from reading until it runs out of buffer space,
whereupon it would exit with a fatal error (closes: #365541).
- pam_end() was not being called if authentication failed
(closes: #405041).
- Manual page datestamps updated (closes: #433181).
Diffstat (limited to 'configure')
-rwxr-xr-x | configure | 378 |
1 files changed, 345 insertions, 33 deletions
@@ -1,5 +1,5 @@ | |||
1 | #! /bin/sh | 1 | #! /bin/sh |
2 | # From configure.ac Revision: 1.372 . | 2 | # From configure.ac Revision: 1.383 . |
3 | # Guess values for system-dependent variables and create Makefiles. | 3 | # Guess values for system-dependent variables and create Makefiles. |
4 | # Generated by GNU Autoconf 2.61 for OpenSSH Portable. | 4 | # Generated by GNU Autoconf 2.61 for OpenSSH Portable. |
5 | # | 5 | # |
@@ -693,9 +693,7 @@ LOGIN_PROGRAM_FALLBACK | |||
693 | PATH_PASSWD_PROG | 693 | PATH_PASSWD_PROG |
694 | LD | 694 | LD |
695 | SSHDLIBS | 695 | SSHDLIBS |
696 | LIBWRAP | ||
697 | LIBEDIT | 696 | LIBEDIT |
698 | LIBPAM | ||
699 | INSTALL_SSH_RAND_HELPER | 697 | INSTALL_SSH_RAND_HELPER |
700 | SSH_PRIVSEP_USER | 698 | SSH_PRIVSEP_USER |
701 | PROG_LS | 699 | PROG_LS |
@@ -716,7 +714,6 @@ PROG_IPCS | |||
716 | PROG_TAIL | 714 | PROG_TAIL |
717 | INSTALL_SSH_PRNG_CMDS | 715 | INSTALL_SSH_PRNG_CMDS |
718 | OPENSC_CONFIG | 716 | OPENSC_CONFIG |
719 | LIBSELINUX | ||
720 | PRIVSEP_PATH | 717 | PRIVSEP_PATH |
721 | xauth_path | 718 | xauth_path |
722 | STRIP_OPT | 719 | STRIP_OPT |
@@ -5390,9 +5387,12 @@ if test "$GCC" = "yes" || test "$GCC" = "egcs"; then | |||
5390 | CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized" | 5387 | CFLAGS="$CFLAGS -Wall -Wpointer-arith -Wuninitialized" |
5391 | GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'` | 5388 | GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'` |
5392 | case $GCC_VER in | 5389 | case $GCC_VER in |
5393 | 1.*) ;; | 5390 | 1.*) no_attrib_nonnull=1 ;; |
5394 | 2.8* | 2.9*) CFLAGS="$CFLAGS -Wsign-compare" ;; | 5391 | 2.8* | 2.9*) |
5395 | 2.*) ;; | 5392 | CFLAGS="$CFLAGS -Wsign-compare" |
5393 | no_attrib_nonnull=1 | ||
5394 | ;; | ||
5395 | 2.*) no_attrib_nonnull=1 ;; | ||
5396 | 3.*) CFLAGS="$CFLAGS -Wsign-compare" ;; | 5396 | 3.*) CFLAGS="$CFLAGS -Wsign-compare" ;; |
5397 | 4.*) CFLAGS="$CFLAGS -Wsign-compare -Wno-pointer-sign" ;; | 5397 | 4.*) CFLAGS="$CFLAGS -Wsign-compare -Wno-pointer-sign" ;; |
5398 | *) ;; | 5398 | *) ;; |
@@ -5466,6 +5466,14 @@ fi | |||
5466 | fi | 5466 | fi |
5467 | fi | 5467 | fi |
5468 | 5468 | ||
5469 | if test "x$no_attrib_nonnull" != "x1" ; then | ||
5470 | |||
5471 | cat >>confdefs.h <<\_ACEOF | ||
5472 | #define HAVE_ATTRIBUTE__NONNULL__ 1 | ||
5473 | _ACEOF | ||
5474 | |||
5475 | fi | ||
5476 | |||
5469 | 5477 | ||
5470 | # Check whether --with-rpath was given. | 5478 | # Check whether --with-rpath was given. |
5471 | if test "${with_rpath+set}" = set; then | 5479 | if test "${with_rpath+set}" = set; then |
@@ -5604,6 +5612,8 @@ fi | |||
5604 | 5612 | ||
5605 | 5613 | ||
5606 | 5614 | ||
5615 | |||
5616 | |||
5607 | for ac_header in \ | 5617 | for ac_header in \ |
5608 | bstring.h \ | 5618 | bstring.h \ |
5609 | crypt.h \ | 5619 | crypt.h \ |
@@ -5626,6 +5636,7 @@ for ac_header in \ | |||
5626 | netgroup.h \ | 5636 | netgroup.h \ |
5627 | pam/pam_appl.h \ | 5637 | pam/pam_appl.h \ |
5628 | paths.h \ | 5638 | paths.h \ |
5639 | poll.h \ | ||
5629 | pty.h \ | 5640 | pty.h \ |
5630 | readpassphrase.h \ | 5641 | readpassphrase.h \ |
5631 | rpc/types.h \ | 5642 | rpc/types.h \ |
@@ -5657,6 +5668,7 @@ for ac_header in \ | |||
5657 | time.h \ | 5668 | time.h \ |
5658 | tmpdir.h \ | 5669 | tmpdir.h \ |
5659 | ttyent.h \ | 5670 | ttyent.h \ |
5671 | ucred.h \ | ||
5660 | unistd.h \ | 5672 | unistd.h \ |
5661 | usersec.h \ | 5673 | usersec.h \ |
5662 | util.h \ | 5674 | util.h \ |
@@ -8998,6 +9010,14 @@ _ACEOF | |||
8998 | _ACEOF | 9010 | _ACEOF |
8999 | 9011 | ||
9000 | enable_etc_default_login=no # has incompatible /etc/default/login | 9012 | enable_etc_default_login=no # has incompatible /etc/default/login |
9013 | case "$host" in | ||
9014 | *-*-nto-qnx6*) | ||
9015 | cat >>confdefs.h <<\_ACEOF | ||
9016 | #define DISABLE_FD_PASSING 1 | ||
9017 | _ACEOF | ||
9018 | |||
9019 | ;; | ||
9020 | esac | ||
9001 | ;; | 9021 | ;; |
9002 | 9022 | ||
9003 | *-*-ultrix*) | 9023 | *-*-ultrix*) |
@@ -11820,8 +11840,7 @@ if test "${with_tcp_wrappers+set}" = set; then | |||
11820 | CPPFLAGS="-I${withval} ${CPPFLAGS}" | 11840 | CPPFLAGS="-I${withval} ${CPPFLAGS}" |
11821 | fi | 11841 | fi |
11822 | fi | 11842 | fi |
11823 | LIBWRAP="-lwrap" | 11843 | LIBS="-lwrap $LIBS" |
11824 | LIBS="$LIBWRAP $LIBS" | ||
11825 | { echo "$as_me:$LINENO: checking for libwrap" >&5 | 11844 | { echo "$as_me:$LINENO: checking for libwrap" >&5 |
11826 | echo $ECHO_N "checking for libwrap... $ECHO_C" >&6; } | 11845 | echo $ECHO_N "checking for libwrap... $ECHO_C" >&6; } |
11827 | cat >conftest.$ac_ext <<_ACEOF | 11846 | cat >conftest.$ac_ext <<_ACEOF |
@@ -11871,7 +11890,7 @@ cat >>confdefs.h <<\_ACEOF | |||
11871 | #define LIBWRAP 1 | 11890 | #define LIBWRAP 1 |
11872 | _ACEOF | 11891 | _ACEOF |
11873 | 11892 | ||
11874 | 11893 | SSHDLIBS="$SSHDLIBS -lwrap" | |
11875 | TCPW_MSG="yes" | 11894 | TCPW_MSG="yes" |
11876 | 11895 | ||
11877 | else | 11896 | else |
@@ -12500,6 +12519,9 @@ fi | |||
12500 | 12519 | ||
12501 | 12520 | ||
12502 | 12521 | ||
12522 | |||
12523 | |||
12524 | |||
12503 | for ac_func in \ | 12525 | for ac_func in \ |
12504 | arc4random \ | 12526 | arc4random \ |
12505 | asprintf \ | 12527 | asprintf \ |
@@ -12522,6 +12544,7 @@ for ac_func in \ | |||
12522 | getnameinfo \ | 12544 | getnameinfo \ |
12523 | getopt \ | 12545 | getopt \ |
12524 | getpeereid \ | 12546 | getpeereid \ |
12547 | getpeerucred \ | ||
12525 | _getpty \ | 12548 | _getpty \ |
12526 | getrlimit \ | 12549 | getrlimit \ |
12527 | getttyent \ | 12550 | getttyent \ |
@@ -12540,6 +12563,7 @@ for ac_func in \ | |||
12540 | ogetaddrinfo \ | 12563 | ogetaddrinfo \ |
12541 | openlog_r \ | 12564 | openlog_r \ |
12542 | openpty \ | 12565 | openpty \ |
12566 | poll \ | ||
12543 | prctl \ | 12567 | prctl \ |
12544 | pstat \ | 12568 | pstat \ |
12545 | readpassphrase \ | 12569 | readpassphrase \ |
@@ -12573,6 +12597,7 @@ for ac_func in \ | |||
12573 | strtonum \ | 12597 | strtonum \ |
12574 | strtoll \ | 12598 | strtoll \ |
12575 | strtoul \ | 12599 | strtoul \ |
12600 | swap32 \ | ||
12576 | sysconf \ | 12601 | sysconf \ |
12577 | tcgetpgrp \ | 12602 | tcgetpgrp \ |
12578 | truncate \ | 12603 | truncate \ |
@@ -13674,6 +13699,150 @@ fi | |||
13674 | 13699 | ||
13675 | 13700 | ||
13676 | 13701 | ||
13702 | { echo "$as_me:$LINENO: checking whether MAXSYMLINKS is declared" >&5 | ||
13703 | echo $ECHO_N "checking whether MAXSYMLINKS is declared... $ECHO_C" >&6; } | ||
13704 | if test "${ac_cv_have_decl_MAXSYMLINKS+set}" = set; then | ||
13705 | echo $ECHO_N "(cached) $ECHO_C" >&6 | ||
13706 | else | ||
13707 | cat >conftest.$ac_ext <<_ACEOF | ||
13708 | /* confdefs.h. */ | ||
13709 | _ACEOF | ||
13710 | cat confdefs.h >>conftest.$ac_ext | ||
13711 | cat >>conftest.$ac_ext <<_ACEOF | ||
13712 | /* end confdefs.h. */ | ||
13713 | |||
13714 | #include <sys/param.h> | ||
13715 | |||
13716 | |||
13717 | int | ||
13718 | main () | ||
13719 | { | ||
13720 | #ifndef MAXSYMLINKS | ||
13721 | (void) MAXSYMLINKS; | ||
13722 | #endif | ||
13723 | |||
13724 | ; | ||
13725 | return 0; | ||
13726 | } | ||
13727 | _ACEOF | ||
13728 | rm -f conftest.$ac_objext | ||
13729 | if { (ac_try="$ac_compile" | ||
13730 | case "(($ac_try" in | ||
13731 | *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; | ||
13732 | *) ac_try_echo=$ac_try;; | ||
13733 | esac | ||
13734 | eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5 | ||
13735 | (eval "$ac_compile") 2>conftest.er1 | ||
13736 | ac_status=$? | ||
13737 | grep -v '^ *+' conftest.er1 >conftest.err | ||
13738 | rm -f conftest.er1 | ||
13739 | cat conftest.err >&5 | ||
13740 | echo "$as_me:$LINENO: \$? = $ac_status" >&5 | ||
13741 | (exit $ac_status); } && { | ||
13742 | test -z "$ac_c_werror_flag" || | ||
13743 | test ! -s conftest.err | ||
13744 | } && test -s conftest.$ac_objext; then | ||
13745 | ac_cv_have_decl_MAXSYMLINKS=yes | ||
13746 | else | ||
13747 | echo "$as_me: failed program was:" >&5 | ||
13748 | sed 's/^/| /' conftest.$ac_ext >&5 | ||
13749 | |||
13750 | ac_cv_have_decl_MAXSYMLINKS=no | ||
13751 | fi | ||
13752 | |||
13753 | rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext | ||
13754 | fi | ||
13755 | { echo "$as_me:$LINENO: result: $ac_cv_have_decl_MAXSYMLINKS" >&5 | ||
13756 | echo "${ECHO_T}$ac_cv_have_decl_MAXSYMLINKS" >&6; } | ||
13757 | if test $ac_cv_have_decl_MAXSYMLINKS = yes; then | ||
13758 | |||
13759 | cat >>confdefs.h <<_ACEOF | ||
13760 | #define HAVE_DECL_MAXSYMLINKS 1 | ||
13761 | _ACEOF | ||
13762 | |||
13763 | |||
13764 | else | ||
13765 | cat >>confdefs.h <<_ACEOF | ||
13766 | #define HAVE_DECL_MAXSYMLINKS 0 | ||
13767 | _ACEOF | ||
13768 | |||
13769 | |||
13770 | fi | ||
13771 | |||
13772 | |||
13773 | |||
13774 | { echo "$as_me:$LINENO: checking whether offsetof is declared" >&5 | ||
13775 | echo $ECHO_N "checking whether offsetof is declared... $ECHO_C" >&6; } | ||
13776 | if test "${ac_cv_have_decl_offsetof+set}" = set; then | ||
13777 | echo $ECHO_N "(cached) $ECHO_C" >&6 | ||
13778 | else | ||
13779 | cat >conftest.$ac_ext <<_ACEOF | ||
13780 | /* confdefs.h. */ | ||
13781 | _ACEOF | ||
13782 | cat confdefs.h >>conftest.$ac_ext | ||
13783 | cat >>conftest.$ac_ext <<_ACEOF | ||
13784 | /* end confdefs.h. */ | ||
13785 | |||
13786 | #include <stddef.h> | ||
13787 | |||
13788 | |||
13789 | int | ||
13790 | main () | ||
13791 | { | ||
13792 | #ifndef offsetof | ||
13793 | (void) offsetof; | ||
13794 | #endif | ||
13795 | |||
13796 | ; | ||
13797 | return 0; | ||
13798 | } | ||
13799 | _ACEOF | ||
13800 | rm -f conftest.$ac_objext | ||
13801 | if { (ac_try="$ac_compile" | ||
13802 | case "(($ac_try" in | ||
13803 | *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; | ||
13804 | *) ac_try_echo=$ac_try;; | ||
13805 | esac | ||
13806 | eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5 | ||
13807 | (eval "$ac_compile") 2>conftest.er1 | ||
13808 | ac_status=$? | ||
13809 | grep -v '^ *+' conftest.er1 >conftest.err | ||
13810 | rm -f conftest.er1 | ||
13811 | cat conftest.err >&5 | ||
13812 | echo "$as_me:$LINENO: \$? = $ac_status" >&5 | ||
13813 | (exit $ac_status); } && { | ||
13814 | test -z "$ac_c_werror_flag" || | ||
13815 | test ! -s conftest.err | ||
13816 | } && test -s conftest.$ac_objext; then | ||
13817 | ac_cv_have_decl_offsetof=yes | ||
13818 | else | ||
13819 | echo "$as_me: failed program was:" >&5 | ||
13820 | sed 's/^/| /' conftest.$ac_ext >&5 | ||
13821 | |||
13822 | ac_cv_have_decl_offsetof=no | ||
13823 | fi | ||
13824 | |||
13825 | rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext | ||
13826 | fi | ||
13827 | { echo "$as_me:$LINENO: result: $ac_cv_have_decl_offsetof" >&5 | ||
13828 | echo "${ECHO_T}$ac_cv_have_decl_offsetof" >&6; } | ||
13829 | if test $ac_cv_have_decl_offsetof = yes; then | ||
13830 | |||
13831 | cat >>confdefs.h <<_ACEOF | ||
13832 | #define HAVE_DECL_OFFSETOF 1 | ||
13833 | _ACEOF | ||
13834 | |||
13835 | |||
13836 | else | ||
13837 | cat >>confdefs.h <<_ACEOF | ||
13838 | #define HAVE_DECL_OFFSETOF 0 | ||
13839 | _ACEOF | ||
13840 | |||
13841 | |||
13842 | fi | ||
13843 | |||
13844 | |||
13845 | |||
13677 | 13846 | ||
13678 | for ac_func in setresuid | 13847 | for ac_func in setresuid |
13679 | do | 13848 | do |
@@ -14989,7 +15158,7 @@ rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext | |||
14989 | 15158 | ||
14990 | # Check for missing getpeereid (or equiv) support | 15159 | # Check for missing getpeereid (or equiv) support |
14991 | NO_PEERCHECK="" | 15160 | NO_PEERCHECK="" |
14992 | if test "x$ac_cv_func_getpeereid" != "xyes" ; then | 15161 | if test "x$ac_cv_func_getpeereid" != "xyes" -a "x$ac_cv_func_getpeerucred" != "xyes"; then |
14993 | { echo "$as_me:$LINENO: checking whether system supports SO_PEERCRED getsockopt" >&5 | 15162 | { echo "$as_me:$LINENO: checking whether system supports SO_PEERCRED getsockopt" >&5 |
14994 | echo $ECHO_N "checking whether system supports SO_PEERCRED getsockopt... $ECHO_C" >&6; } | 15163 | echo $ECHO_N "checking whether system supports SO_PEERCRED getsockopt... $ECHO_C" >&6; } |
14995 | cat >conftest.$ac_ext <<_ACEOF | 15164 | cat >conftest.$ac_ext <<_ACEOF |
@@ -16430,7 +16599,7 @@ fi | |||
16430 | done | 16599 | done |
16431 | 16600 | ||
16432 | 16601 | ||
16433 | 16602 | saved_LIBS="$LIBS" | |
16434 | { echo "$as_me:$LINENO: checking for ia_openinfo in -liaf" >&5 | 16603 | { echo "$as_me:$LINENO: checking for ia_openinfo in -liaf" >&5 |
16435 | echo $ECHO_N "checking for ia_openinfo in -liaf... $ECHO_C" >&6; } | 16604 | echo $ECHO_N "checking for ia_openinfo in -liaf... $ECHO_C" >&6; } |
16436 | if test "${ac_cv_lib_iaf_ia_openinfo+set}" = set; then | 16605 | if test "${ac_cv_lib_iaf_ia_openinfo+set}" = set; then |
@@ -16493,14 +16662,106 @@ fi | |||
16493 | { echo "$as_me:$LINENO: result: $ac_cv_lib_iaf_ia_openinfo" >&5 | 16662 | { echo "$as_me:$LINENO: result: $ac_cv_lib_iaf_ia_openinfo" >&5 |
16494 | echo "${ECHO_T}$ac_cv_lib_iaf_ia_openinfo" >&6; } | 16663 | echo "${ECHO_T}$ac_cv_lib_iaf_ia_openinfo" >&6; } |
16495 | if test $ac_cv_lib_iaf_ia_openinfo = yes; then | 16664 | if test $ac_cv_lib_iaf_ia_openinfo = yes; then |
16665 | |||
16666 | LIBS="$LIBS -liaf" | ||
16667 | |||
16668 | for ac_func in set_id | ||
16669 | do | ||
16670 | as_ac_var=`echo "ac_cv_func_$ac_func" | $as_tr_sh` | ||
16671 | { echo "$as_me:$LINENO: checking for $ac_func" >&5 | ||
16672 | echo $ECHO_N "checking for $ac_func... $ECHO_C" >&6; } | ||
16673 | if { as_var=$as_ac_var; eval "test \"\${$as_var+set}\" = set"; }; then | ||
16674 | echo $ECHO_N "(cached) $ECHO_C" >&6 | ||
16675 | else | ||
16676 | cat >conftest.$ac_ext <<_ACEOF | ||
16677 | /* confdefs.h. */ | ||
16678 | _ACEOF | ||
16679 | cat confdefs.h >>conftest.$ac_ext | ||
16680 | cat >>conftest.$ac_ext <<_ACEOF | ||
16681 | /* end confdefs.h. */ | ||
16682 | /* Define $ac_func to an innocuous variant, in case <limits.h> declares $ac_func. | ||
16683 | For example, HP-UX 11i <limits.h> declares gettimeofday. */ | ||
16684 | #define $ac_func innocuous_$ac_func | ||
16685 | |||
16686 | /* System header to define __stub macros and hopefully few prototypes, | ||
16687 | which can conflict with char $ac_func (); below. | ||
16688 | Prefer <limits.h> to <assert.h> if __STDC__ is defined, since | ||
16689 | <limits.h> exists even on freestanding compilers. */ | ||
16690 | |||
16691 | #ifdef __STDC__ | ||
16692 | # include <limits.h> | ||
16693 | #else | ||
16694 | # include <assert.h> | ||
16695 | #endif | ||
16696 | |||
16697 | #undef $ac_func | ||
16698 | |||
16699 | /* Override any GCC internal prototype to avoid an error. | ||
16700 | Use char because int might match the return type of a GCC | ||
16701 | builtin and then its argument prototype would still apply. */ | ||
16702 | #ifdef __cplusplus | ||
16703 | extern "C" | ||
16704 | #endif | ||
16705 | char $ac_func (); | ||
16706 | /* The GNU C library defines this for functions which it implements | ||
16707 | to always fail with ENOSYS. Some functions are actually named | ||
16708 | something starting with __ and the normal name is an alias. */ | ||
16709 | #if defined __stub_$ac_func || defined __stub___$ac_func | ||
16710 | choke me | ||
16711 | #endif | ||
16712 | |||
16713 | int | ||
16714 | main () | ||
16715 | { | ||
16716 | return $ac_func (); | ||
16717 | ; | ||
16718 | return 0; | ||
16719 | } | ||
16720 | _ACEOF | ||
16721 | rm -f conftest.$ac_objext conftest$ac_exeext | ||
16722 | if { (ac_try="$ac_link" | ||
16723 | case "(($ac_try" in | ||
16724 | *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; | ||
16725 | *) ac_try_echo=$ac_try;; | ||
16726 | esac | ||
16727 | eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5 | ||
16728 | (eval "$ac_link") 2>conftest.er1 | ||
16729 | ac_status=$? | ||
16730 | grep -v '^ *+' conftest.er1 >conftest.err | ||
16731 | rm -f conftest.er1 | ||
16732 | cat conftest.err >&5 | ||
16733 | echo "$as_me:$LINENO: \$? = $ac_status" >&5 | ||
16734 | (exit $ac_status); } && { | ||
16735 | test -z "$ac_c_werror_flag" || | ||
16736 | test ! -s conftest.err | ||
16737 | } && test -s conftest$ac_exeext && | ||
16738 | $as_test_x conftest$ac_exeext; then | ||
16739 | eval "$as_ac_var=yes" | ||
16740 | else | ||
16741 | echo "$as_me: failed program was:" >&5 | ||
16742 | sed 's/^/| /' conftest.$ac_ext >&5 | ||
16743 | |||
16744 | eval "$as_ac_var=no" | ||
16745 | fi | ||
16746 | |||
16747 | rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \ | ||
16748 | conftest$ac_exeext conftest.$ac_ext | ||
16749 | fi | ||
16750 | ac_res=`eval echo '${'$as_ac_var'}'` | ||
16751 | { echo "$as_me:$LINENO: result: $ac_res" >&5 | ||
16752 | echo "${ECHO_T}$ac_res" >&6; } | ||
16753 | if test `eval echo '${'$as_ac_var'}'` = yes; then | ||
16496 | cat >>confdefs.h <<_ACEOF | 16754 | cat >>confdefs.h <<_ACEOF |
16497 | #define HAVE_LIBIAF 1 | 16755 | #define `echo "HAVE_$ac_func" | $as_tr_cpp` 1 |
16498 | _ACEOF | 16756 | _ACEOF |
16757 | SSHDLIBS="$SSHDLIBS -liaf" | ||
16758 | fi | ||
16759 | done | ||
16499 | 16760 | ||
16500 | LIBS="-liaf $LIBS" | ||
16501 | 16761 | ||
16502 | fi | 16762 | fi |
16503 | 16763 | ||
16764 | LIBS="$saved_LIBS" | ||
16504 | 16765 | ||
16505 | ### Configure cryptographic random number support | 16766 | ### Configure cryptographic random number support |
16506 | 16767 | ||
@@ -16926,7 +17187,7 @@ done | |||
16926 | 17187 | ||
16927 | PAM_MSG="yes" | 17188 | PAM_MSG="yes" |
16928 | 17189 | ||
16929 | LIBPAM="-lpam" | 17190 | SSHDLIBS="$SSHDLIBS -lpam" |
16930 | 17191 | ||
16931 | cat >>confdefs.h <<\_ACEOF | 17192 | cat >>confdefs.h <<\_ACEOF |
16932 | #define USE_PAM 1 | 17193 | #define USE_PAM 1 |
@@ -16939,11 +17200,10 @@ _ACEOF | |||
16939 | # libdl already in LIBS | 17200 | # libdl already in LIBS |
16940 | ;; | 17201 | ;; |
16941 | *) | 17202 | *) |
16942 | LIBPAM="$LIBPAM -ldl" | 17203 | SSHDLIBS="$SSHDLIBS -ldl" |
16943 | ;; | 17204 | ;; |
16944 | esac | 17205 | esac |
16945 | fi | 17206 | fi |
16946 | |||
16947 | fi | 17207 | fi |
16948 | 17208 | ||
16949 | 17209 | ||
@@ -25179,6 +25439,59 @@ fi | |||
25179 | fi | 25439 | fi |
25180 | 25440 | ||
25181 | 25441 | ||
25442 | { echo "$as_me:$LINENO: checking if struct __res_state _res is an extern" >&5 | ||
25443 | echo $ECHO_N "checking if struct __res_state _res is an extern... $ECHO_C" >&6; } | ||
25444 | cat >conftest.$ac_ext <<_ACEOF | ||
25445 | |||
25446 | #include <stdio.h> | ||
25447 | #if HAVE_SYS_TYPES_H | ||
25448 | # include <sys/types.h> | ||
25449 | #endif | ||
25450 | #include <netinet/in.h> | ||
25451 | #include <arpa/nameser.h> | ||
25452 | #include <resolv.h> | ||
25453 | extern struct __res_state _res; | ||
25454 | int main() { return 0; } | ||
25455 | |||
25456 | _ACEOF | ||
25457 | rm -f conftest.$ac_objext conftest$ac_exeext | ||
25458 | if { (ac_try="$ac_link" | ||
25459 | case "(($ac_try" in | ||
25460 | *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; | ||
25461 | *) ac_try_echo=$ac_try;; | ||
25462 | esac | ||
25463 | eval "echo \"\$as_me:$LINENO: $ac_try_echo\"") >&5 | ||
25464 | (eval "$ac_link") 2>conftest.er1 | ||
25465 | ac_status=$? | ||
25466 | grep -v '^ *+' conftest.er1 >conftest.err | ||
25467 | rm -f conftest.er1 | ||
25468 | cat conftest.err >&5 | ||
25469 | echo "$as_me:$LINENO: \$? = $ac_status" >&5 | ||
25470 | (exit $ac_status); } && { | ||
25471 | test -z "$ac_c_werror_flag" || | ||
25472 | test ! -s conftest.err | ||
25473 | } && test -s conftest$ac_exeext && | ||
25474 | $as_test_x conftest$ac_exeext; then | ||
25475 | { echo "$as_me:$LINENO: result: yes" >&5 | ||
25476 | echo "${ECHO_T}yes" >&6; } | ||
25477 | |||
25478 | cat >>confdefs.h <<\_ACEOF | ||
25479 | #define HAVE__RES_EXTERN 1 | ||
25480 | _ACEOF | ||
25481 | |||
25482 | |||
25483 | else | ||
25484 | echo "$as_me: failed program was:" >&5 | ||
25485 | sed 's/^/| /' conftest.$ac_ext >&5 | ||
25486 | |||
25487 | { echo "$as_me:$LINENO: result: no" >&5 | ||
25488 | echo "${ECHO_T}no" >&6; } | ||
25489 | |||
25490 | fi | ||
25491 | |||
25492 | rm -f core conftest.err conftest.$ac_objext conftest_ipa8_conftest.oo \ | ||
25493 | conftest$ac_exeext conftest.$ac_ext | ||
25494 | |||
25182 | # Check whether user wants SELinux support | 25495 | # Check whether user wants SELinux support |
25183 | SELINUX_MSG="no" | 25496 | SELINUX_MSG="no" |
25184 | LIBSELINUX="" | 25497 | LIBSELINUX="" |
@@ -25186,6 +25499,7 @@ LIBSELINUX="" | |||
25186 | # Check whether --with-selinux was given. | 25499 | # Check whether --with-selinux was given. |
25187 | if test "${with_selinux+set}" = set; then | 25500 | if test "${with_selinux+set}" = set; then |
25188 | withval=$with_selinux; if test "x$withval" != "xno" ; then | 25501 | withval=$with_selinux; if test "x$withval" != "xno" ; then |
25502 | save_LIBS="$LIBS" | ||
25189 | 25503 | ||
25190 | cat >>confdefs.h <<\_ACEOF | 25504 | cat >>confdefs.h <<\_ACEOF |
25191 | #define WITH_SELINUX 1 | 25505 | #define WITH_SELINUX 1 |
@@ -25400,8 +25714,7 @@ echo "$as_me: error: SELinux support requires libselinux library" >&2;} | |||
25400 | { (exit 1); exit 1; }; } | 25714 | { (exit 1); exit 1; }; } |
25401 | fi | 25715 | fi |
25402 | 25716 | ||
25403 | save_LIBS="$LIBS" | 25717 | SSHDLIBS="$SSHDLIBS $LIBSELINUX" |
25404 | LIBS="$LIBS $LIBSELINUX" | ||
25405 | 25718 | ||
25406 | 25719 | ||
25407 | for ac_func in getseuserbyname get_default_context_with_level | 25720 | for ac_func in getseuserbyname get_default_context_with_level |
@@ -25503,7 +25816,6 @@ done | |||
25503 | fi | 25816 | fi |
25504 | 25817 | ||
25505 | 25818 | ||
25506 | |||
25507 | # Check whether user wants Kerberos 5 support | 25819 | # Check whether user wants Kerberos 5 support |
25508 | KRB5_MSG="no" | 25820 | KRB5_MSG="no" |
25509 | 25821 | ||
@@ -28917,9 +29229,7 @@ LOGIN_PROGRAM_FALLBACK!$LOGIN_PROGRAM_FALLBACK$ac_delim | |||
28917 | PATH_PASSWD_PROG!$PATH_PASSWD_PROG$ac_delim | 29229 | PATH_PASSWD_PROG!$PATH_PASSWD_PROG$ac_delim |
28918 | LD!$LD$ac_delim | 29230 | LD!$LD$ac_delim |
28919 | SSHDLIBS!$SSHDLIBS$ac_delim | 29231 | SSHDLIBS!$SSHDLIBS$ac_delim |
28920 | LIBWRAP!$LIBWRAP$ac_delim | ||
28921 | LIBEDIT!$LIBEDIT$ac_delim | 29232 | LIBEDIT!$LIBEDIT$ac_delim |
28922 | LIBPAM!$LIBPAM$ac_delim | ||
28923 | INSTALL_SSH_RAND_HELPER!$INSTALL_SSH_RAND_HELPER$ac_delim | 29233 | INSTALL_SSH_RAND_HELPER!$INSTALL_SSH_RAND_HELPER$ac_delim |
28924 | SSH_PRIVSEP_USER!$SSH_PRIVSEP_USER$ac_delim | 29234 | SSH_PRIVSEP_USER!$SSH_PRIVSEP_USER$ac_delim |
28925 | PROG_LS!$PROG_LS$ac_delim | 29235 | PROG_LS!$PROG_LS$ac_delim |
@@ -28937,6 +29247,8 @@ PROG_DF!$PROG_DF$ac_delim | |||
28937 | PROG_VMSTAT!$PROG_VMSTAT$ac_delim | 29247 | PROG_VMSTAT!$PROG_VMSTAT$ac_delim |
28938 | PROG_UPTIME!$PROG_UPTIME$ac_delim | 29248 | PROG_UPTIME!$PROG_UPTIME$ac_delim |
28939 | PROG_IPCS!$PROG_IPCS$ac_delim | 29249 | PROG_IPCS!$PROG_IPCS$ac_delim |
29250 | PROG_TAIL!$PROG_TAIL$ac_delim | ||
29251 | INSTALL_SSH_PRNG_CMDS!$INSTALL_SSH_PRNG_CMDS$ac_delim | ||
28940 | _ACEOF | 29252 | _ACEOF |
28941 | 29253 | ||
28942 | if test `sed -n "s/.*$ac_delim\$/X/p" conf$$subs.sed | grep -c X` = 97; then | 29254 | if test `sed -n "s/.*$ac_delim\$/X/p" conf$$subs.sed | grep -c X` = 97; then |
@@ -28978,10 +29290,7 @@ _ACEOF | |||
28978 | ac_delim='%!_!# ' | 29290 | ac_delim='%!_!# ' |
28979 | for ac_last_try in false false false false false :; do | 29291 | for ac_last_try in false false false false false :; do |
28980 | cat >conf$$subs.sed <<_ACEOF | 29292 | cat >conf$$subs.sed <<_ACEOF |
28981 | PROG_TAIL!$PROG_TAIL$ac_delim | ||
28982 | INSTALL_SSH_PRNG_CMDS!$INSTALL_SSH_PRNG_CMDS$ac_delim | ||
28983 | OPENSC_CONFIG!$OPENSC_CONFIG$ac_delim | 29293 | OPENSC_CONFIG!$OPENSC_CONFIG$ac_delim |
28984 | LIBSELINUX!$LIBSELINUX$ac_delim | ||
28985 | PRIVSEP_PATH!$PRIVSEP_PATH$ac_delim | 29294 | PRIVSEP_PATH!$PRIVSEP_PATH$ac_delim |
28986 | xauth_path!$xauth_path$ac_delim | 29295 | xauth_path!$xauth_path$ac_delim |
28987 | STRIP_OPT!$STRIP_OPT$ac_delim | 29296 | STRIP_OPT!$STRIP_OPT$ac_delim |
@@ -28995,7 +29304,7 @@ LIBOBJS!$LIBOBJS$ac_delim | |||
28995 | LTLIBOBJS!$LTLIBOBJS$ac_delim | 29304 | LTLIBOBJS!$LTLIBOBJS$ac_delim |
28996 | _ACEOF | 29305 | _ACEOF |
28997 | 29306 | ||
28998 | if test `sed -n "s/.*$ac_delim\$/X/p" conf$$subs.sed | grep -c X` = 15; then | 29307 | if test `sed -n "s/.*$ac_delim\$/X/p" conf$$subs.sed | grep -c X` = 12; then |
28999 | break | 29308 | break |
29000 | elif $ac_last_try; then | 29309 | elif $ac_last_try; then |
29001 | { { echo "$as_me:$LINENO: error: could not make $CONFIG_STATUS" >&5 | 29310 | { { echo "$as_me:$LINENO: error: could not make $CONFIG_STATUS" >&5 |
@@ -29487,7 +29796,10 @@ echo " Compiler: ${CC}" | |||
29487 | echo " Compiler flags: ${CFLAGS}" | 29796 | echo " Compiler flags: ${CFLAGS}" |
29488 | echo "Preprocessor flags: ${CPPFLAGS}" | 29797 | echo "Preprocessor flags: ${CPPFLAGS}" |
29489 | echo " Linker flags: ${LDFLAGS}" | 29798 | echo " Linker flags: ${LDFLAGS}" |
29490 | echo " Libraries: ${LIBWRAP} ${LIBPAM} ${LIBS}" | 29799 | echo " Libraries: ${LIBS}" |
29800 | if test ! -z "${SSHDLIBS}"; then | ||
29801 | echo " +for sshd: ${SSHDLIBS}" | ||
29802 | fi | ||
29491 | 29803 | ||
29492 | echo "" | 29804 | echo "" |
29493 | 29805 | ||
@@ -29513,12 +29825,12 @@ if test ! -z "$RAND_HELPER_CMDHASH" ; then | |||
29513 | fi | 29825 | fi |
29514 | 29826 | ||
29515 | if test ! -z "$NO_PEERCHECK" ; then | 29827 | if test ! -z "$NO_PEERCHECK" ; then |
29516 | echo "WARNING: the operating system that you are using does not " | 29828 | echo "WARNING: the operating system that you are using does not" |
29517 | echo "appear to support either the getpeereid() API nor the " | 29829 | echo "appear to support getpeereid(), getpeerucred() or the" |
29518 | echo "SO_PEERCRED getsockopt() option. These facilities are used to " | 29830 | echo "SO_PEERCRED getsockopt() option. These facilities are used to" |
29519 | echo "enforce security checks to prevent unauthorised connections to " | 29831 | echo "enforce security checks to prevent unauthorised connections to" |
29520 | echo "ssh-agent. Their absence increases the risk that a malicious " | 29832 | echo "ssh-agent. Their absence increases the risk that a malicious" |
29521 | echo "user can connect to your agent. " | 29833 | echo "user can connect to your agent." |
29522 | echo "" | 29834 | echo "" |
29523 | fi | 29835 | fi |
29524 | 29836 | ||