Using OpenSSH 3.4p1 with publickey authentication I get an extra fd 10 to the pty: [tornado;~]-15> ssh localhost [tornado;~]-1> ls -l /proc/467/fd total 0 lrwx------ 1 wichert wichert 64 Jul 10 12:02 0 -> /dev/pts/3 lrwx------ 1 wichert wichert 64 Jul 10 12:02 1 -> /dev/pts/3 lrwx------ 1 wichert wichert 64 Jul 10 12:02 10 -> /dev/pts/3 lrwx------ 1 wichert wichert 64 Jul 10 12:02 2 -> /dev/pts/3 (467 being the pid of the shell created)
This happens with both privsep enabled and disabled.
i get this with ksh(1) on OpenBSD, but not with rc(1), and ktrace suggest that it's a fctnl with F_DUPFD done by ksh, so i think it's not sshd's fault.
More information: I get this with multiple different shells (bash and zsh). I am also able to reproduce this with OpenSSH 3.0.2p1.
did you try a non-jobcontrol shell?
i can reproduce this on OpenBSD with ksh from the console, so it's not an OpenSSH bug.
Mass change of RESOLVED bugs to CLOSED