Bug 988

Summary:

sshd StrictModes check failed with fs acl

Product:

Portable OpenSSH

Reporter:

Juri Malinovski <coil93>

Component:

sshd

Assignee:

OpenSSH Bugzilla mailing list <openssh-bugs>

Status:

CLOSED WORKSFORME

Severity:

normal

Priority:

Version:

3.9p1

Hardware:

ix86

OS:

Linux

Attachments:

Description	Flags
debug strictmodes	none

Description Juri Malinovski 2005-02-28 22:38:44 AEDT

Tested on reiserfs (Suse linux 9.2)

How to repeat:

1) StrictModes and PubkeyAuthentication must be enabled for sshd on remote host
2) Create user test on remote host with homedir /home/test 
 and homedir permissions - owner test, mode 0700 
3) Create authkeys pair for user test and cat public key into    
/home/test/.ssh/authorized_keys
4) Set acl on /home/test like "setfacl -m u:test:rwx /home/test"
5) Try to login as test on remote host via ssh

Results:
PubkeyAuthentication failed. 
sshd error message:
"debug1: trying public key file /home/test/.ssh/authorized_keys
 debug3: secure_filename: checking '/home/test/.ssh'
 debug3: secure_filename: checking '/home/test'
 Authentication refused: bad ownership or modes for directory /home/test"

Comment 1 Damien Miller 2005-03-01 23:03:04 AEDT

Created attachment 837 [details]
debug strictmodes

Can you try applying this patch and repeating your test. I don't understand why
this fails.

Comment 2 Damien Miller 2005-06-03 12:57:47 AEST

three months with no reply == no bug

Comment 3 Darren Tucker 2006-10-07 11:38:49 AEST

Change all RESOLVED bug to CLOSED with the exception of the ones fixed post-4.4.