- enhanced openssh-chroot.patch with UseChroot configuration option

[packages/openssh.git] / opensshd.init

diff --git a/opensshd.init b/opensshd.init
index 2756528ad18d4463d4b74d85056130b495cf1f36..8fba73144f9688b059732a97d5567623c1bdca79 100644 (file)
--- a/opensshd.init
+++ b/opensshd.init
@@ -4,8 +4,8 @@
 #
 # chkconfig:   345 55 45
 #
-# description: sshd (secure shell daemon) is a server part of the ssh suite.
-#              Ssh can be used for remote login, remote file copying, TCP port
+# description: sshd (secure shell daemon) is a server part of the ssh suite. \
+#              Ssh can be used for remote login, remote file copying, TCP port \
 #              forwarding etc. Ssh offers strong encryption and authentication.
 
 
@@ -15,62 +15,98 @@
 # Get network config
 . /etc/sysconfig/network
 
+SERVICE_LIMITS="-u unlimited -Sc 0"
+
 # Get service config
 [ -f /etc/sysconfig/sshd ] && . /etc/sysconfig/sshd
 
 # Check that networking is up.
-if is_no "${NETWORKING}"; then
-        msg_Network_Down OpenSSH
-        exit 1
+if is_yes "${NETWORKING}"; then
+       if [ ! -f /var/lock/subsys/network -a "$1" != stop -a "$1" != status -a "$1" != init ]; then
+               msg_network_down OpenSSH
+               exit 1
+       fi
+else
+       exit 0
 fi
                        
-
+RETVAL=0
 # See how we were called.
 case "$1" in
   start)
-       # Check if the service is already running?
+       # generate new keys with empty passwords if they do not exist
+       if [ ! -f /etc/ssh/ssh_host_key -o ! -s /etc/ssh/ssh_host_key ]; then
+               /usr/bin/ssh-keygen -t rsa1 -f /etc/ssh/ssh_host_key -N '' 1>&2
+               chmod 600 /etc/ssh/ssh_host_key
+       fi
+       if [ ! -f /etc/ssh/ssh_host_rsa_key -o ! -s /etc/ssh/ssh_host_rsa_key ]; then
+               /usr/bin/ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N '' 1>&2
+               chmod 600 /etc/ssh/ssh_host_rsa_key
+       fi
+       if [ ! -f /etc/ssh/ssh_host_dsa_key -o ! -s /etc/ssh/ssh_host_dsa_key ]; then
+               /usr/bin/ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key -N '' 1>&2
+               chmod 600 /etc/ssh/ssh_host_dsa_key
+       fi
+
        if [ ! -f /etc/ssh/ssh_host_key ]; then
-               msg_Not_Running OpenSSH
-               nls "No SSH host key found! You must run \"$0 init\" first."
+               msg_not_running OpenSSH
+               nls "No SSH host key found! You must run \"%s init\" first." "$0"
                exit 1
        fi
+
+       # Check if the service is already running?
        if [ ! -f /var/lock/subsys/sshd ]; then
                msg_starting OpenSSH
                daemon /usr/sbin/sshd 
                RETVAL=$?
                [ $RETVAL -eq 0 ] && touch /var/lock/subsys/sshd                
        else
-               msg_Already_Running OpenSSH
+               msg_already_running OpenSSH
        fi
        ;;
   stop)
-        if [ -f /var/lock/subsys/sshd ]; then
+       if [ -f /var/lock/subsys/sshd ]; then
                msg_stopping OpenSSH
                killproc sshd
                rm -f /var/run/sshd.pid /var/lock/subsys/sshd >/dev/null 2>&1
        else
-               msg_Not_Running OpenSSH
-               exit 1
+               msg_not_running OpenSSH
        fi      
        ;;
   restart)
        $0 stop
        $0 start
+       exit $?
        ;;
   status)
        status sshd
        exit $?
        ;;
   init)
-       echo "Now the SSH host key will be generated. Please note, that if you"
-       echo "will use password for the key, you will need to type it on each"
-       echo "reboot."
-       ssh-keygen -f /etc/ssh/ssh_host_key
+       nls "Now the SSH host key will be generated. Please note, that if you"
+       nls "will use password for the key, you will need to type it on each"
+       nls "reboot."
+       /usr/bin/ssh-keygen -t rsa1 -f /etc/ssh/ssh_host_key
+       chmod 600 /etc/ssh/ssh_host_key
+       /usr/bin/ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
+       chmod 600 /etc/ssh/ssh_host_rsa_key
+       /usr/bin/ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key
+       chmod 600 /etc/ssh/ssh_host_dsa_key
        exit $?
-       ;;      
+       ;;
+  reload|force-reload)
+       if [ -f /var/lock/subsys/sshd ]; then
+               msg_reloading OpenSSH
+               killproc sshd -HUP
+               RETVAL=$?
+       else
+               msg_not_running OpenSSH >&2
+               exit 7
+       fi
+       ;;
   *)
-       msg_Usage "$0 {start|stop|status|restart}"
-       exit 1
+       msg_usage "$0 {start|stop|init|restart|reload|force-reload|status}"
+       exit 3
 esac
 
 exit $RETVAL