手工編譯openssh server的rpm

jerryswxs

最近發(fā)現(xiàn)redhat 5.4 使用的openssh
server的版本還是4.3p1，這是一個有漏洞的版本，網(wǎng)上沒有找到合適的版本，最后決定自己編譯一個rpm解決。
必須安裝開發(fā)環(huán)境，如果沒
有按照以下步驟安裝
# yum install gcc
# yum install openssl-devel
# yum
install pam-devel
# yum install rpm-build
得到openssh server的版本
# wget
http://ftp.bit.nl/mirror/openssh/portable/openssh-5.2p1.tar.gz
#
wget
http://ftp.bit.nl/mirror/openssh/portable/openssh-5.2p1.tar.gz.asc
#
wget -O-
http://ftp.bit.nl/mirror/openssh/DJM-GPG-KEY.asc
| gpg --import
# gpg openssh-5.2p1.tar.gz.asc
gpg: Signature made
Mon 23 Feb 2009 01:18:28 AM CET using DSA key ID 86FF9C48
gpg: Good
signature from "Damien Miller (Personal Key) "
gpg: WARNING: This key
is not certified with a trusted signature!
gpg: There is no
indication that the signature belongs to the owner.
Primary key
fingerprint: 3981 992A 1523 ABA0 79DB FC66 CE8E CB03 86FF 9C48
制作rpm包
# tar zxvf openssh-5.2p1.tar.gz
# cp
openssh-5.2p1/contrib/redhat/openssh.spec /usr/src/redhat/SPECS/
# cp
openssh-5.2p1.tar.gz /usr/src/redhat/SOURCES/
# cd
/usr/src/redhat/SPECS
# perl -i.bak -pe 's/^(%define
no_(gnome|x11)_askpass)\s+0$/$1 1/' openssh.spec
如果出現(xiàn)zlib版本錯誤，可以先安裝zlib1.2.3 或者使用以下命令解決。
--without-zlib-version-check
建立安裝包
# rpmbuild -bb openssh.spec
生成在/usr/src/redhat/RPMS/i386目錄下
#
cd /usr/src/redhat/RPMS/`uname -i`
# ls -l
-rw-r--r-- 1 root root
275808 Feb 27 08:08 openssh-5.2p1-1.x86_64.rpm
-rw-r--r-- 1 root root
439875 Feb 27 08:08 openssh-clients-5.2p1-1.x86_64.rpm
-rw-r--r-- 1
root root 277714 Feb 27 08:08 openssh-server-5.2p1-1.x86_64.rpm
安裝
#
rpm -Uvh openssh*rpm
Preparing...
########################################### [100%]
1:openssh
########################################### [ 33%]
2:openssh-clients
########################################### [ 67%]
3:openssh-server
########################################### [100%]
# service sshd
restart
               
               
               

本文來自ChinaUnix博客，如果查看原文請點：http://blog.chinaunix.net/u/7546/showart_2183328.html