On Sat, Mar 01, 2014 at 05:37:49PM +0100, Guilhem Moulin wrote:
> I fully second this patch.  Would be great to see it applied in Jessie ;-)
> 
> Another common use case is where the dropbear in the ramdisk should
> listen on a port other than 22: then a simple firewall rule can make
> it inaccessible from the whole world while keeping the main SSH server
> accessible.
> 
> Currently the only way to achieve that is again to edit
> 
>   /usr/share/initramfs-tools/scripts/init-premount/dropbear
> 
> which isn't a very robust solution as it wouldn't survive an upgrade.

Hi, I can add this part to the dropbear package (and actually do so with
the next upload)

--- /usr/share/initramfs-tools/scripts/init-premount/dropbear.ORG 2011-02-24 
16:53:20.000000000 +0000
+++ /usr/share/initramfs-tools/scripts/init-premount/dropbear 2011-02-24 
16:54:16.000000000 +0000
@@ -32,5 +32,5 @@
 configure_networking &
 
 mkdir -p /var/run
-/sbin/dropbear
+/sbin/dropbear $PKGOPTION_dropbear_OPTION

but /etc/initramfs-tools/initramfs.conf is installed through the
initramfs-tools package
$ dpkg -S /etc/initramfs-tools/initramfs.conf 
initramfs-tools: /etc/initramfs-tools/initramfs.conf
$ 

Please, if you want both parts applied, take care of this.

Thanks, Gerrit.


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to