patch for security/openssh-portable

[Denis Barov]

Probably you want VersionAddendum option in sshd_config?

Wed, Jan 13, 2010 at 08:14 -0500 jhell:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> 
> Request.
> 
> Attached is a patch against security/openssh-portable Makefile to remove 
> FreeBSD version and openssl version from its version reply string.
> 
> This changes it from its default reply to: SSH-2.0-OpenSSH_5.2p1
> 
> I would rather leave a prober guessing rather than giving the information 
> he needs to analyze a large number of hosts quickly.
> 
> - -- 
> 
>   Wed Jan 13 08:06:17 2010
> 
>   jhell
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.14 (FreeBSD)
> 
> iQEcBAEBAgAGBQJLTceJAAoJEJBXh4mJ2FR+nrMH/jzYBXWyUXueQFrGYJnovskV
> uSDme/bxd+iwVlsAyGPNK8Ub8oQC9725ohh0a8N6rcotENODPJyXRh0c9Gz5Kr3D
> 81opHf+qE6Z0Awhb3FcNYf/jCve4TOj5MZpzdy1peZ6pwJXA8BM7YbrP1+OFlQRN
> yu3HuNg/LQyx0Rk0kVzVISLInpdmndC/OBtCjLwBuGb0Np/WYshuNOr739jOodcL
> Odqa94apkhZpm8yI5+P6tQdf/RMOpn/PgB0MidLt3hH2Ayxpm903Wrs9p4d6xzc8
> i2tZR8crdHCwjO5TRHITWmc273XZychU24P8HIC06GP56pG8jClFR1XSqBCpZMY=
> =fKHX
> -----END PGP SIGNATURE-----

> --- Makefile.orig	2009-12-30 15:14:04.646162156 -0500
> +++ Makefile	2009-12-30 15:15:36.939692199 -0500
> @@ -229,11 +229,9 @@
>  		-e 's|%%RC_SCRIPT_NAME%%|${RC_SCRIPT_NAME}|' ${WRKSRC}/sshd.8
>  	@${REINPLACE_CMD} -E -e 's|SSH_VERSION|TMP_SSH_VERSION|' \
>  		-e 's|.*SSH_RELEASE.*||' ${WRKSRC}/version.h
> -	@${ECHO_CMD} '#define FREEBSD_PORT_VERSION	" FreeBSD-${PKGNAME}"' >> \
> +	@${ECHO_CMD} '#define SSH_VERSION	TMP_SSH_VERSION SSH_PORTABLE' >> \
>  		${WRKSRC}/version.h
> -	@${ECHO_CMD} '#define SSH_VERSION	TMP_SSH_VERSION SSH_PORTABLE FREEBSD_PORT_VERSION' >> \
> -		${WRKSRC}/version.h
> -	@${ECHO_CMD} '#define SSH_RELEASE	TMP_SSH_VERSION SSH_PORTABLE FREEBSD_PORT_VERSION' >> \
> +	@${ECHO_CMD} '#define SSH_RELEASE	TMP_SSH_VERSION SSH_PORTABLE' >> \
>  		${WRKSRC}/version.h
>  .if defined(WITH_HPN)
>  	@${REINPLACE_CMD} -e 's|TMP_SSH_VERSION SSH_PORTABLE|TMP_SSH_VERSION SSH_PORTABLE SSH_HPN|' \


-- 
Cheers
Denis Barov