* Rumi Szabolcs <[EMAIL PROTECTED]> [2006-11-14 07:42]:
> On Mon, 13 Nov 2006 13:15:46 +0100
> Wolfram Schlich <[EMAIL PROTECTED]> wrote:
> 
> > In what ChangeLog, the portage package ChangeLog?
> > Yeah, I also had to look at the OpenSSH ChangeLog to find out that
> > SFTP logging has been added as a new feature.
> 
> Yep, of course I meant the openssh package ChangeLog in portage
> which IMHO should contain a word about why a USE flag has been
> removed.

Ok. Well, I don't know of any "standard procedure" to notify
the user of a reason for a USE flag removal... :(

> > > To me this doesn't look like as if it would have been integrated...
> > 
> > The sftp-server(8) binary has new command line options that influence
> > SFTP logging:
> > 
> >     -f log_facility
> >     -l log_level
> > 
> > The sftplogging also contains functionality to control umask and permit
> > chmod and chgrp, which the upstream sftp-server does not provide.
> 
> Hmm... do I understand correctly that the sftplogging patch has not
> been integrated but only a part of it's functions has been implemented
> in a different way than it is in the patch?

Yes. 

> Well, the syslog logging is useful but those settings about umask and
> chmod/chgrp are essential in managing an sftp-based file repository with
> multiuser access which is a great alternative to cleartext FTP access.
> Using the settings the sftplogging patch provides I can set up an sftp
> server in a usable and secure way which would otherwise be impossible.
> 
> So here is a big PLEASE to keep/put back the sftplogging patch and
> the use flag in the openssh ebuild!

Well, the patch was called "sftplogging". umask+chmod/chgrp has
absolutely *nothing* to do with "SFTP logging".
I believe this code was misplaced in a patch called "sftplogging".

So, I see it in a similar way as vapier does:
Get the OpenSSH developers to include such functionality -OR-
produce a patch that doesn't touch upstream SFTP logging but
just adds umask+chmod/chgrp control features, maybe we can
think about adding such a small patch as long as upstream does
not provide such features. Just an idea.
-- 
Regards,
Wolfram Schlich <[EMAIL PROTECTED]>
Gentoo Linux * http://dev.gentoo.org/~wschlich/
-- 
gentoo-dev@gentoo.org mailing list

Reply via email to