slices: add openssh-{server,client,sftp-server} slices and its depend…

…encies

slices/init-system-helpers.yaml

@@ -0,0 +1,10 @@
+package: init-system-helpers
+
+slices:
+  bins:
+    contents:
+      /usr/bin/deb-systemd-helper:
+      /usr/bin/deb-systemd-invoke:
+      /usr/sbin/invoke-rc.d:
+      /usr/sbin/service:
+      /usr/sbin/update-rc.d:

slices/libaudit-common.yaml

@@ -0,0 +1,6 @@
+package: libaudit-common
+
+slices:
+  config:
+    contents:
+      /etc/libaudit.conf:

slices/libaudit1.yaml

@@ -0,0 +1,10 @@
+package: libaudit1
+
+slices:
+  libs:
+    essential:
+      - libaudit-common_config
+      - libc6_libs
+      - libcap-ng0_libs
+    contents:
+      /usr/lib/*-linux-*/libaudit.so.1*:

slices/libbsd0.yaml

@@ -0,0 +1,9 @@
+package: libbsd0
+
+slices:
+  libs:
+    essential:
+      - libc6_libs
+      - libmd0_libs
+    contents:
+      /usr/lib/*-linux-*/libbsd.so.0*:

slices/libc6.yaml

@@ -28,3 +28,7 @@ slices:
       /usr/lib/*-linux-*/librt.so.*:
       /usr/lib/*-linux-*/libthread_db.so.*:
       /usr/lib/*-linux-*/libutil.so.*:
+
+  gconv:
+    contents:
+      /usr/lib/*-linux-*/gconv/**:

slices/libcap-ng0.yaml

@@ -0,0 +1,9 @@
+package: libcap-ng0
+
+slices:
+  libs:
+    essential:
+      - libc6_libs
+    contents:
+      /usr/lib/*-linux-*/libcap-ng.so.0*:
+      /usr/lib/*-linux-*/libdrop_ambient.so.0*:

slices/libcap2-bin.yaml

@@ -0,0 +1,12 @@
+package: libcap2-bin
+
+slices:
+  bins:
+    essential:
+      - libc6_libs
+      - libcap2_libs
+    contents:
+      /usr/sbin/capsh:
+      /usr/sbin/getcap:
+      /usr/sbin/getpcaps:
+      /usr/sbin/setcap:

slices/libcap2.yaml

@@ -0,0 +1,9 @@
+package: libcap2
+
+slices:
+  libs:
+    essential:
+      - libc6_libs
+    contents:
+      /usr/lib/*-linux-*/libcap.so.2*:
+      /usr/lib/*-linux-*/libpsx.so.2*:

slices/libcbor0.10.yaml

@@ -0,0 +1,8 @@
+package: libcbor0.10
+
+slices:
+  libs:
+    essential:
+      - libc6_libs
+    contents:
+      /usr/lib/*-linux-*/libcbor.so.0.10*:

slices/libcom-err2.yaml

@@ -5,4 +5,4 @@ slices:
     essential:
       - libc6_libs
     contents:
-      /lib/*-linux-*/libcom_err.so.*:
+      /usr/lib/*-linux-*/libcom_err.so.2*:

slices/libedit2.yaml

@@ -0,0 +1,10 @@
+package: libedit2
+
+slices:
+  libs:
+    essential:
+      - libbsd0_libs
+      - libc6_libs
+      - libtinfo6_libs
+    contents:
+      /usr/lib/*-linux-*/libedit.so.2*:

slices/libfido2-1.yaml

@@ -0,0 +1,12 @@
+package: libfido2-1
+
+slices:
+  libs:
+    essential:
+      - libc6_libs
+      - libcbor0.10_libs
+      - libssl3_libs
+      - libudev1_libs
+      - zlib1g_libs
+    contents:
+      /usr/lib/*-linux-*/libfido2.so.1*:

slices/libgcrypt20.yaml

@@ -0,0 +1,9 @@
+package: libgcrypt20
+
+slices:
+  libs:
+    essential:
+      - libc6_libs
+      - libgpg-error0_libs
+    contents:
+      /usr/lib/*-linux-*/libgcrypt.so.20*:

slices/libgpg-error0.yaml

@@ -0,0 +1,8 @@
+package: libgpg-error0
+
+slices:
+  libs:
+    essential:
+      - libc6_libs
+    contents:
+      /usr/lib/*-linux-*/libgpg-error.so.0*:

slices/libk5crypto3.yaml

@@ -6,4 +6,4 @@ slices:
       - libc6_libs
       - libkrb5support0_libs
     contents:
-      /usr/lib/*-linux-*/libk5crypto.so.*:
+      /usr/lib/*-linux-*/libk5crypto.so.3*:

slices/libkrb5-3.yaml

@@ -12,4 +12,4 @@ slices:
     contents:
       /usr/lib/*-linux-*/krb5/plugins/libkrb5/:
       /usr/lib/*-linux-*/krb5/plugins/preauth/spake.so:
-      /usr/lib/*-linux-*/libkrb5.so.*:
+      /usr/lib/*-linux-*/libkrb5.so.3*:

slices/libkrb5support0.yaml

@@ -5,4 +5,4 @@ slices:
     essential:
       - libc6_libs
     contents:
-      /usr/lib/*-linux-*/libkrb5support.so.*:
+      /usr/lib/*-linux-*/libkrb5support.so.0*:

slices/liblz4-1.yaml

@@ -0,0 +1,8 @@
+package: liblz4-1
+
+slices:
+  libs:
+    essential:
+      - libc6_libs
+    contents:
+      /usr/lib/*-linux-*/liblz4.so.1*:

slices/liblzma5.yaml

@@ -4,4 +4,4 @@ slices:
     essential:
       - libc6_libs
     contents:
-      /usr/lib/*-linux-*/liblzma.so.*:
+      /usr/lib/*-linux-*/liblzma.so.5*:

slices/libmd0.yaml

@@ -0,0 +1,8 @@
+package: libmd0
+
+slices:
+  libs:
+    essential:
+      - libc6_libs
+    contents:
+      /usr/lib/*-linux-*/libmd.so.0*:

slices/libpam-modules-bin.yaml

@@ -0,0 +1,24 @@
+package: libpam-modules-bin
+
+slices:
+  bins:
+    essential:
+      - libaudit1_libs
+      - libc6_libs
+      - libcrypt1_libs
+      - libpam0g_libs
+      - libselinux1_libs
+    contents:
+      /usr/sbin/faillock:
+      /usr/sbin/mkhomedir_helper:
+      /usr/sbin/pam_extrausers_chkpwd:
+      /usr/sbin/pam_extrausers_update:
+      /usr/sbin/pam_namespace_helper:
+      /usr/sbin/pam_timestamp_check:
+      /usr/sbin/pwhistory_helper:
+      /usr/sbin/unix_chkpwd:
+      /usr/sbin/unix_update:
+
+  services:
+    contents:
+      /usr/lib/systemd/system/pam_namespace.service:

slices/libpam-modules.yaml

@@ -0,0 +1,83 @@
+package: libpam-modules
+
+slices:
+  config:
+    contents:
+      /etc/security/access.conf:
+      /etc/security/faillock.conf:
+      /etc/security/group.conf:
+      /etc/security/limits.conf:
+      /etc/security/limits.d/:
+      /etc/security/namespace.conf:
+      /etc/security/namespace.d/:
+      /etc/security/namespace.init:
+      /etc/security/pam_env.conf:
+      /etc/security/sepermit.conf:
+      /etc/security/time.conf:
+
+  libs:
+    essential:
+      - libaudit1_libs
+      - libc6_libs
+      - libcrypt1_libs
+      - libdb5.3_libs
+      - libpam0g_libs
+      - libselinux1_libs
+    contents:
+      /usr/lib/*-linux-*/security/pam_access.so:
+      /usr/lib/*-linux-*/security/pam_debug.so:
+      /usr/lib/*-linux-*/security/pam_deny.so:
+      /usr/lib/*-linux-*/security/pam_echo.so:
+      /usr/lib/*-linux-*/security/pam_env.so:
+      /usr/lib/*-linux-*/security/pam_exec.so:
+      /usr/lib/*-linux-*/security/pam_extrausers.so:
+      /usr/lib/*-linux-*/security/pam_faildelay.so:
+      /usr/lib/*-linux-*/security/pam_faillock.so:
+      /usr/lib/*-linux-*/security/pam_filter.so:
+      /usr/lib/*-linux-*/security/pam_ftp.so:
+      /usr/lib/*-linux-*/security/pam_group.so:
+      /usr/lib/*-linux-*/security/pam_issue.so:
+      /usr/lib/*-linux-*/security/pam_keyinit.so:
+      /usr/lib/*-linux-*/security/pam_limits.so:
+      /usr/lib/*-linux-*/security/pam_listfile.so:
+      /usr/lib/*-linux-*/security/pam_localuser.so:
+      /usr/lib/*-linux-*/security/pam_loginuid.so:
+      /usr/lib/*-linux-*/security/pam_mail.so:
+      /usr/lib/*-linux-*/security/pam_mkhomedir.so:
+      /usr/lib/*-linux-*/security/pam_motd.so:
+      /usr/lib/*-linux-*/security/pam_namespace.so:
+      /usr/lib/*-linux-*/security/pam_nologin.so:
+      /usr/lib/*-linux-*/security/pam_permit.so:
+      /usr/lib/*-linux-*/security/pam_pwhistory.so:
+      /usr/lib/*-linux-*/security/pam_rhosts.so:
+      /usr/lib/*-linux-*/security/pam_rootok.so:
+      /usr/lib/*-linux-*/security/pam_securetty.so:
+      /usr/lib/*-linux-*/security/pam_selinux.so:
+      /usr/lib/*-linux-*/security/pam_sepermit.so:
+      /usr/lib/*-linux-*/security/pam_setquota.so:
+      /usr/lib/*-linux-*/security/pam_shells.so:
+      /usr/lib/*-linux-*/security/pam_stress.so:
+      /usr/lib/*-linux-*/security/pam_succeed_if.so:
+      /usr/lib/*-linux-*/security/pam_time.so:
+      /usr/lib/*-linux-*/security/pam_timestamp.so:
+      /usr/lib/*-linux-*/security/pam_tty_audit.so:
+      /usr/lib/*-linux-*/security/pam_umask.so:
+      /usr/lib/*-linux-*/security/pam_unix.so:
+      /usr/lib/*-linux-*/security/pam_usertype.so:
+      /usr/lib/*-linux-*/security/pam_warn.so:
+      /usr/lib/*-linux-*/security/pam_wheel.so:
+      /usr/lib/*-linux-*/security/pam_xauth.so:
+
+  # Used by pam-auth-update to generate the pam.d/ config
+  # files inside etc. However pam-auth-update relies on
+  # debconf to actually work and discover these packages.
+  pam-config:
+    contents:
+      /usr/share/pam-configs/mkhomedir:
+
+  standard:
+    essential:
+      - libpam-modules-bin_bins
+      - libpam-modules-bin_services
+      - libpam-modules_config
+      - libpam-modules_libs

slices/libpam-runtime.yaml

@@ -0,0 +1,60 @@
+package: libpam-runtime
+
+slices:
+  bins:
+    essential:
+      - libpam-modules_libs
+    contents:
+      # perl scripts that rely on debconf to properly work and discover
+      # plugins/rules in /usr/share/pam-configs/*
+      /usr/sbin/pam-auth-update:
+      /usr/sbin/pam_getenv:
+
+  config:
+    contents:
+      /etc/pam.conf:
+      /etc/pam.d/other:
+
+  # folders expected by libpam to exist
+  var:
+    contents:
+      /var/lib/pam/:
+
+  # Used by pam-auth-update to generate the pam.d/ config
+  # files inside etc. However pam-auth-update relies on
+  # debconf to actually work and discover these packages.
+  pam-config:
+    contents:
+      /usr/share/pam-configs/unix:
+
+  # default templates for the /etc/pam.d files that are used by
+  # pam-auth-update to generate the /etc/pam.d versions based on
+  # additional plugs in /usr/share/pam-configs/*.
+  pam-defaults:
+    contents:
+      /usr/share/pam/common-account:
+      /usr/share/pam/common-account.md5sums:
+      /usr/share/pam/common-auth:
+      /usr/share/pam/common-auth.md5sums:
+      /usr/share/pam/common-password:
+      /usr/share/pam/common-password.md5sums:
+      /usr/share/pam/common-session:
+      /usr/share/pam/common-session-noninteractive:
+      /usr/share/pam/common-session-noninteractive.md5sums:
+      /usr/share/pam/common-session.md5sums:
+
+  # Introduce a core slice that only contains minimal things that
+  # can be needed by other things than the perl scripts from this
+  # package.
+  core:
+    essential:
+      - libpam-runtime_config
+      - libpam-runtime_var
+
+  standard:
+    essential:
+      - libpam-runtime_bins
+      - libpam-runtime_config
+      - libpam-runtime_pam-config
+      - libpam-runtime_pam-defaults
+      - libpam-runtime_var

slices/libpam0g.yaml

@@ -0,0 +1,11 @@
+package: libpam0g
+
+slices:
+  libs:
+    essential:
+      - libaudit1_libs
+      - libc6_libs
+    contents:
+      /usr/lib/*-linux-*/libpam.so.0*:
+      /usr/lib/*-linux-*/libpam_misc.so.0*:
+      /usr/lib/*-linux-*/libpamc.so.0*:

slices/libproc2-0.yaml

@@ -0,0 +1,9 @@
+package: libproc2-0
+
+slices:
+  libs:
+    essential:
+      - libc6_libs
+      - libsystemd0_libs
+    contents:
+      /usr/lib/*-linux-*/libproc2.so.0*:

slices/libselinux1.yaml

@@ -7,3 +7,7 @@ slices:
       - libpcre2-8-0_libs
     contents:
       /usr/lib/*-linux-*/libselinux.so.1:
+
+  tmpfiles-d:
+    contents:
+      /usr/lib/tmpfiles.d/libselinux1.conf:

slices/libsystemd0.yaml

@@ -0,0 +1,13 @@
+package: libsystemd0
+
+slices:
+  libs:
+    essential:
+      - libc6_libs
+      - libcap2_libs
+      - libgcrypt20_libs
+      - liblz4-1_libs
+      - liblzma5_libs
+      - libzstd1_libs
+    contents:
+      /usr/lib/*-linux-*/libsystemd.so.0*: