Re: [gentoo-user] SSH authentication attempts - serious issue

[Justin R Findlay <justin@jfindlay.us>]

On Mon, Jun 05, 2006 at 02:15:34PM -0300, Leandro Melo de Sales wrote:
> How can I recompiler openssh to support tcpwrapper? I can't find
> /etc/hosts.allow neither /etc/hosts.deny. Is there something missing?
> Is there a way to put tcpwrapper as a turned on option for all
> programs that supports it?

I'm pretty sure if you have neither a hosts.allow nor a hosts.deny then
there is no special restrictions/allowances made against any remote
hosts, see the man pages for hosts.allow, hosts.deny.

> Specifically for openssh I edit /etc/portage/package.use file and put:
> 
> net-misc/openssh tcpwrapper, but I got this:
> 
> # emerge --pretend openssh
> 
> I want to see +tcpwrapper...

you should try:

# emerge --pretend --verbose openssh

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R   ] net-misc/openssh-4.3_p2-r1  USE="ipv6 pam tcpd -X509
-chroot -hpn -kerberos -ldap -libedit -sftplogging -skey -smartcard
-static" 0 kB

and it looks like the tcpwrapper flag is 'tcpd', not 'tcpwrapper'.


Justin
-- 
gentoo-user@gentoo.org mailing list