Package: openssh-server
Version: 1:7.7p1-2
Severity: normal

After upgrading some openvz container at a hosting provider to unstable,
ssh stopped working; incoming connections closed before password prompt.

In auth.log, there was this:

ssh_sandbox_child: setrlimit(RLIMIT_NOFILE, { 0, 0 }): Invalid argument 

Seems like there is no way to disable the sandbox any more, 
and so this may cause problems for openvz users.

That openvz was running kernel version 2.6.32-openvz-042stab127.2. I
have avoided openvz until now, so I don't know if such an outdated
kernel is typical of openvz hosting providers.

I can't find mention of RLIMIT_NOFILE not being supported in that old
kernel version though (even with 0, 0), so it may not be the fault of an
outdated kernel, but a limitation of openvz generally that RLIMIT_NOFILE
doesn't work.

see shy jo

Attachment: signature.asc
Description: PGP signature

Reply via email to