On 11/15/06, Jonas Karlsson <[EMAIL PROTECTED]> wrote: > While trying to get openssh to install on my server (I have too little > activity to generate any randomness for key generation) I realized that > the way we redistribute the OpenSSH package is not a good way. As the host > keys are included in Defaults/Settings anyone can pretend to be the > packagers server. But without the host keys one can't run sshd. Therefore > I think that some sort of action to generate these keys at installation or > just a note that this has to be done in order to use sshd should be > implemented. This can be used for other apps that need computer specific > settings and/or files.
InstallPackage supports a script called Resources/PostInstall which runs in a sandbox with access to the program's contents and settings only. I believe the OpenSSH recipe should be fixed adding that script. -- Hisham _______________________________________________ gobolinux-devel mailing list [email protected] http://lists.gobolinux.org/mailman/listinfo/gobolinux-devel
