summaryrefslogtreecommitdiff
path: root/security/dropbear/patches/patch-ab
blob: f0dbe4c6a91cdcfd865d6d75aaccbc62937de2e8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
$NetBSD: patch-ab,v 1.4 2006/03/14 20:03:43 drochner Exp $

--- options.h.orig	2006-03-12 05:52:51.000000000 +0100
+++ options.h
@@ -127,8 +127,11 @@ etc) slower (perhaps by 50%). Recommende
  * but there's an interface via a PAM module - don't bother using it otherwise.
  * You can't enable both PASSWORD and PAM. */
 
+#ifdef DISABLE_PAM
 #define ENABLE_SVR_PASSWORD_AUTH
-/* #define ENABLE_SVR_PAM_AUTH */ /* requires ./configure --enable-pam */
+#else
+#define ENABLE_SVR_PAM_AUTH /* requires ./configure --enable-pam */
+#endif
 #define ENABLE_SVR_PUBKEY_AUTH
 
 #define ENABLE_CLI_PASSWORD_AUTH
@@ -154,7 +157,7 @@ etc) slower (perhaps by 50%). Recommende
  * however significantly reduce the security of your ssh connections
  * if the PRNG state becomes guessable - make sure you know what you are
  * doing if you change this. */
-#define DROPBEAR_RANDOM_DEV "/dev/random"
+#define DROPBEAR_RANDOM_DEV "/dev/urandom"
 
 /* prngd must be manually set up to produce output */
 /*#define DROPBEAR_PRNGD_SOCKET "/var/run/dropbear-rng"*/