#### Beyond Linux® From Scratch (systemd Edition) - Version 11.1

### Chapter 4. Security

- Prev

  Shadow-4.11.1

- Next

  stunnel-5.62

- Up
- Home

# ssh-askpass-8.8p1

## Introduction to ssh-askpass

The ssh-askpass is a generic executable name for many packages, with similar names, that provide a interactive X service to grab password for packages requiring administrative privileges to be run. It prompts the user with a window box where the necessary password can be inserted. Here, we choose Damien Miller's package distributed in the OpenSSH tarball.

This package is known to build and work properly using an LFS-11.1 platform.

### Package Information

- Download (HTTP): https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.8p1.tar.gz

- Download (FTP): ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.8p1.tar.gz

- Download MD5 sum: 8ce5f390958baeeab635aafd0ef41453

- Download size: 1.7 MB

- Estimated disk space required: 9.8 MB

- Estimated build time: less than 0.1 SBU

### ssh-askpass Dependencies

#### Required

GTK+-2.24.33, Sudo-1.9.9 (runtime), Xorg Libraries, and a graphical environment (runtime)

User Notes: https://wiki.linuxfromscratch.org/blfs/wiki/ssh-askpass

## Installation of ssh-askpass

Install ssh-askpass by running the following commands:

    cd contrib &&
    make gnome-ssh-askpass2

Now, as the `root` user:

    install -v -d -m755                    /usr/libexec/openssh/contrib  &&
    install -v -m755    gnome-ssh-askpass2 /usr/libexec/openssh/contrib  &&
    ln -sv -f contrib/gnome-ssh-askpass2   /usr/libexec/openssh/ssh-askpass

The use of /usr/libexec/openssh/contrib and a symlink is justified by the eventual necessity of a different program for that service.

## Configuring ssh-askpass

###

#### Configuration Information

As the `root` user, configure Sudo-1.9.9 to use ssh-askpass:

    cat >> /etc/sudo.conf << "EOF" &&
    # Path to askpass helper program
    Path askpass /usr/libexec/openssh/ssh-askpass
    EOF
    chmod -v 0644 /etc/sudo.conf

If a given graphical <application> requires administrative privileges, use sudo -A <application> from an x-terminal, from a Window Manager menu and/or replace "Exec=<application> ..." by "Exec=sudo -A <application> ..." in the <application>.desktop file.

## Contents

Installed Programs: None
Installed Library: None
Installed Directory: /usr/libexec/openssh/contrib

Last updated on

- Prev

  Shadow-4.11.1

- Next

  stunnel-5.62

- Up
- Home