components/openssh/patches/003-last_login.patch
author Brent Paulson <Brent.Paulson@Oracle.COM>
Wed, 01 Oct 2014 04:52:05 -0700
changeset 2128 ea2364416471
parent 2070 be6c6d4f183f
child 5025 bdd7dc7d2af4
permissions -rw-r--r--
PSARC/2014/342 pam_unix_session lastlog support 19579776 OpenSSH doesn't need to reference lastlog anymore now that PAM session mgmt does

# The man page change here is Solaris-specific and thus is not being
# contributed back to the upstream community.  The servconf.c change
# was developed in-house and has been submitted upstream to OpenSSH for
# their consideration:
# https://bugzilla.mindrot.org/show_bug.cgi?id=2278
#
# OpenSSH normally updates lastlog when users login and reads lastlog to
# determine the last login time of the user however on Solaris the
# pam_unix_session(5) module handles both of these tasks so we compile
# OpenSSH with --disable-lastlog to disable all lastlog references.
# This means the sshd_config option of PrintLastLog is now ignored and
# can't be changed so we update sshd's configuration parsing to flag
# this as unsupported and update the man page here.
#
*** old/servconf.c Wed Sep 17 02:54:26 2014
--- new/servconf.c Wed Sep 17 02:56:55 2014
***************
*** 432,438 ****
--- 432,442 ----
  	{ "listenaddress", sListenAddress, SSHCFG_GLOBAL },
  	{ "addressfamily", sAddressFamily, SSHCFG_GLOBAL },
  	{ "printmotd", sPrintMotd, SSHCFG_GLOBAL },
+ #ifdef DISABLE_LASTLOG
+ 	{ "printlastlog", sUnsupported, SSHCFG_GLOBAL },
+ #else
  	{ "printlastlog", sPrintLastLog, SSHCFG_GLOBAL },
+ #endif
  	{ "ignorerhosts", sIgnoreRhosts, SSHCFG_GLOBAL },
  	{ "ignoreuserknownhosts", sIgnoreUserKnownHosts, SSHCFG_GLOBAL },
  	{ "x11forwarding", sX11Forwarding, SSHCFG_ALL },
*** old/sshd_config.5	Tue Sep 16 06:24:13 2014
--- new/sshd_config.5	Tue Sep 16 06:47:47 2014
***************
*** 1008,1015 ****
  .Xr sshd 1M
  should print the date and time of the last user login when a user logs
  in interactively.
! The default is
! .Dq yes .
  .It Cm PrintMotd
  Specifies whether
  .Xr sshd 1M
--- 1008,1015 ----
  .Xr sshd 1M
  should print the date and time of the last user login when a user logs
  in interactively.
! On Solaris this option is always ignored since pam_unix_session(5)
! reports the last login time.
  .It Cm PrintMotd
  Specifies whether
  .Xr sshd 1M
***************
*** 1349,1355 ****
  (though not necessary) that it be world-readable.
  .El
  .Sh SEE ALSO
! .Xr sshd 8
  .Sh AUTHORS
  OpenSSH is a derivative of the original and free
  ssh 1.2.12 release by Tatu Ylonen.
--- 1349,1356 ----
  (though not necessary) that it be world-readable.
  .El
  .Sh SEE ALSO
! .Xr sshd 8 ,
! .Xr pam_unix_session 5
  .Sh AUTHORS
  OpenSSH is a derivative of the original and free
  ssh 1.2.12 release by Tatu Ylonen.