On Fri, 17 Nov 2006 21:06:35 +0100, Hisham Muhammad <[EMAIL PROTECTED]> wrote:
> On 11/15/06, Jonas Karlsson <[EMAIL PROTECTED]> wrote: >> While trying to get openssh to install on my server (I have too little >> activity to generate any randomness for key generation) I realized that >> the way we redistribute the OpenSSH package is not a good way. As the >> host >> keys are included in Defaults/Settings anyone can pretend to be the >> packagers server. But without the host keys one can't run sshd. >> Therefore >> I think that some sort of action to generate these keys at installation >> or >> just a note that this has to be done in order to use sshd should be >> implemented. This can be used for other apps that need computer specific >> settings and/or files. > > InstallPackage supports a script called Resources/PostInstall which > runs in a sandbox with access to the program's contents and settings > only. I believe the OpenSSH recipe should be fixed adding that script. > Ok, nice. I looked at the code and couldn't deduce if $target and $settings_target and such were available from the PostInstall script. I also noted that it only uses unionsandbox. How about those users that use fibo sandbox? -- /Jonas Using Opera's revolutionary e-mail client: http://www.opera.com/mail/ _______________________________________________ gobolinux-devel mailing list [email protected] http://lists.gobolinux.org/mailman/listinfo/gobolinux-devel
