Red Hat Bugzilla – Bug 20201
RFE: Remove rsh as a OpenSSH dependency
Last modified: 2008-05-01 11:37:59 EDT
I prefer not to have any unnecercery set-uid binaries, and as such I remove rsh from the servers I operate. I would like to see rsh removed as a dependency for OpenSSH. (I realise I can do --nodeps or just remove the set-uid bit, but it would be nice to just be able to remove the package). Thanks,
rsh is only a _build_ requirement, so the situation isn't that bad. However, I don't like to have rsh installed on systems I use for RPM rebuilding either ;-)
We include /usr/bin/rsh because if we don't, the configure script will have to guess its location. And it can guess wrong. Adding it as a build-time requirement will also flag it as an error if (for whatever reason) /usr/bin/rsh moves.
Hi, Nalin, As you know, Pekka is active with the openssh port -- Are you ameanable to a patch to remove the configure.in search (and bad guess when absent) for /usr/bin/rsh -- the only way the tombstones art of OpenBSD 2.7 will be accurate is if we take steps to get RID of telnetd, rsh, rlogin, (and in an HP environment remsh). -- Russ
A patch would be great, but I'm trying to keep the degree to which we deviate from the openssh.com packages down to changes which make sense for no one else, so this might best be sent upstream.
This seems to have been adopted in the .spec file: * Tue Mar 20 2001 Nalin Dahyabhai <nalin@redhat.com> As I am not the requester, I will not close, but would ask Nalin, or abartlet@samba.org to consider closing it as "CURR"