diff --git a/openssh-6.4p1-ignore-SIGXFSZ-in-postauth.patch b/openssh-6.4p1-ignore-SIGXFSZ-in-postauth.patch new file mode 100644 index 0000000..be77aeb --- /dev/null +++ b/openssh-6.4p1-ignore-SIGXFSZ-in-postauth.patch @@ -0,0 +1,28 @@ +diff --git a/ChangeLog b/ChangeLog +index 7bcd596..3a0d993 100644 +--- a/ChangeLog ++++ b/ChangeLog +@@ -1,3 +1,9 @@ ++20140823 ++ - (djm) [sshd.c] Ignore SIGXFSZ in preauth monitor child; can explode on ++ lastlog writing on platforms with high UIDs; bz#2263 ++ - (djm) [monitor.c sshd.c] SIGXFSZ needs to be ignored in postauth ++ monitor, not preauth; bz#2263 ++ + 20140703 + - OpenBSD CVS Sync + - djm@cvs.openbsd.org 2014/07/03 03:34:09 +diff --git a/monitor.c b/monitor.c +index 453bea3..9dadb4d 100644 +--- a/monitor.c ++++ b/monitor.c +@@ -524,6 +524,9 @@ monitor_child_postauth(struct monitor *pmonitor) + signal(SIGHUP, &monitor_child_handler); + signal(SIGTERM, &monitor_child_handler); + signal(SIGINT, &monitor_child_handler); ++#ifdef SIGXFSZ ++ signal(SIGXFSZ, SIG_IGN); ++#endif + + if (compat20) { + mon_dispatch = mon_dispatch_postauth20; diff --git a/openssh.spec b/openssh.spec index 680ce51..2c035f3 100644 --- a/openssh.spec +++ b/openssh.spec @@ -210,6 +210,9 @@ Patch913: openssh-6.4p1-partial-success.patch # fix parsing of empty options in sshd_conf # https://bugzilla.mindrot.org/show_bug.cgi?id=2281 Patch914: openssh-6.4p1-servconf-parser.patch +# Ignore SIGXFSZ in postauth monitor +# https://bugzilla.mindrot.org/show_bug.cgi?id=2263 +Patch915: openssh-6.4p1-ignore-SIGXFSZ-in-postauth.patch License: BSD Group: Applications/Internet @@ -442,6 +445,7 @@ popd %patch912 -p1 -b .utf8-banner %patch913 -p1 -b .partial-success %patch914 -p1 -b .servconf +%patch915 -p1 -b .SIGXFSZ