1 files changed, 22 insertions, 3 deletions

diff --git a/debian/openssh-server.preinst b/debian/openssh-server.preinst
index a5c507bd4..2c2e2687c 100644
--- a/debian/openssh-server.preinst
+++ b/debian/openssh-server.preinst
@@ -1,17 +1,36 @@
 #!/bin/sh -e
 
+ETC_DEFAULT_SSH=@ETC_DEFAULT_SSH@
+
+ETC_INIT_D_SSH=@ETC_INIT_D_SSH@
+
+ETC_PAM_D_SSH=@ETC_PAM_D_SSH@
+
 action=$1
 version=$2
 
 prepare_transfer_conffile () {
         CONFFILE="$1"
+        TEXT="$2"
+        MODE="$3"
         [ -e "$CONFFILE" ] || return 0
 
         md5sum="$(md5sum "$CONFFILE" |sed -e 's/ .*//')"
         old_md5sum="$(sed -n -e "/^Conffiles:/,/^[^ ]/{\\' $CONFFILE'{s/^ [^ ]* //;s/ .*//;p}}" /var/lib/dpkg/status)"
         if [ "$md5sum" = "$old_md5sum" ]; then
                 echo >&2 "Transferring ownership of conffile $CONFFILE ..."
+                # We have to write out the desired new text of the conffile,
+                # which is tricky in the preinst, hence the nasty way we
+                # have to hardcode the text here. Fortunately, this is only
+                # necessary with sarge's dpkg and older.
+                if echo "$TEXT" | head -n1 | grep -q '^@.*@$'; then
+                        echo >&2 'Unsubstituted conffile text! Please report this bug.'
+                        exit 1
+                fi
+                printf '%s' "$TEXT" >"$CONFFILE.dpkg-new"
+                chmod "$MODE" "$CONFFILE.dpkg-new"
                 mv -f "$CONFFILE" "$CONFFILE.moved-by-preinst"
+                mv -f "$CONFFILE.dpkg-new" "$CONFFILE"
                 return 0
         fi
 }
@@ -92,9 +111,9 @@ EOF
   fi
 
   if dpkg --compare-versions "$version" lt 0; then
-    prepare_transfer_conffile /etc/default/ssh
-    prepare_transfer_conffile /etc/init.d/ssh
-    prepare_transfer_conffile /etc/pam.d/ssh
+    prepare_transfer_conffile /etc/default/ssh "$ETC_DEFAULT_SSH" 0644
+    prepare_transfer_conffile /etc/init.d/ssh "$ETC_INIT_D_SSH" 0755
+    prepare_transfer_conffile /etc/pam.d/ssh "$ETC_PAM_D_SSH" 0644
   fi
 fi