Package: openssh-server Version: 1:7.7p1-2 Severity: normal After upgrading some openvz container at a hosting provider to unstable, ssh stopped working; incoming connections closed before password prompt.
In auth.log, there was this: ssh_sandbox_child: setrlimit(RLIMIT_NOFILE, { 0, 0 }): Invalid argument [preauth] Seems like there is no way to disable the sandbox any more, and so this may cause problems for openvz users. That openvz was running kernel version 2.6.32-openvz-042stab127.2. I have avoided openvz until now, so I don't know if such an outdated kernel is typical of openvz hosting providers. I can't find mention of RLIMIT_NOFILE not being supported in that old kernel version though (even with 0, 0), so it may not be the fault of an outdated kernel, but a limitation of openvz generally that RLIMIT_NOFILE doesn't work. -- see shy jo
signature.asc
Description: PGP signature