ssh a ssl z ports

Andrej Bojda bojda at centrum.sk
Tue Sep 7 16:44:50 CEST 2004


Ahoj, mohol by mi niekto spravit na tento postup recenziu ?
Mam tu nejaku zavaznu chybu ?
Dakujem.

su
password:

uname -v
FreeBSD 5.2.1-RELEASE-p9 #8: Mon Sep  6 10:43:13 CEST 2004

/etc/rc.d/sshd stop
rm -rf /etc/ssh

vi /etc/rc.conf
sshd_enable="YES"
sshd_program="/usr/local/sbin/sshd"
sshd_flags=""

vi /etc/make.conf
OPENSSH_OVERWRITE_BASE=YES
OPENSSL_OVERWRITE_BASE=YES
NO_OPENSSH=true
NO_OPENSSL=true

cp /usr/local/etc/pkgtools.conf.sample /usr/local/etc/pkgtools.conf
chmod 600 /usr/local/etc/pkgtools.conf

vi /usr/local/etc/pkgtools.conf
MAKE_ARGS = {

        'security/openssl' => 'OPENSSL_OVERWRITE_BASE=yes',
        'security/openssh-portable' => 'OPENSSH_OVERWRITE_BASE=yes',
}


cd /usr/ports/security/openssh-portable
make clean all install clean

cd /usr/ports/security/openssl
make clean all install clean

vi /usr/local/etc/ssh/sshd_config
Port 22
Protocol 2
PermitRootLogin no
UsePrivilegeSeparation yes
Banner /etc/issue
Subsystem       sftp    /usr/libexec/sftp-server


chflags noschg /var/empty
mkdir /var/empty/etc
cp /etc/resolv.conf /var/empty/etc/
chflags schg /var/empty

/usr/local/etc/rc.d/sshd.sh start

Andrej

---------------------------------------------------------
http://www.morfeo.sk/ - Morfeo.sk - Špecialista na vyhľadávanie na Slovensku!









More information about the Users-l mailing list