openssh: use ssh-keysign from PATH

ssh-keysign is used for host-based authentication, and is designed to be used as SUID-root program. OpenSSH defaults to referencing it from libexec, which cannot be made SUID in Nix.
2019-07-31 12:19:36 +00:00
parent ffd9bf7e29
commit 9fe10288f0
2 changed files with 31 additions and 0 deletions
@@ -50,6 +50,8 @@ stdenv.mkDerivation rec {
        url = https://github.com/openssh/openssh-portable/commit/6010c0303a422a9c5fa8860c061bf7105eb7f8b2.patch;
        sha256 = "0q27i9ymr97yb628y44qi4m11hk5qikb1ji1vhvax8hp18lwskds";
      })
+
+      ./ssh-keysign.patch
    ]
    ++ optional withGssapiPatches (assert withKerberos; gssapiPatch);