some of my long ssh commands failed with
exec request failed on channel 0
and it seems the dropbear server rejected them because of the limits
in sysoptions.h:
#define MAX_CMD_LEN 1024 /* max length of a command */
//...
#define MAX_STRING_LEN 2400 /* Sun SSH needs this long for algos */
i assu
* Matt Johnston [2015-12-30 22:08:14 +0800]:
> patch. I think the best behaviour would be to call
> getrandom() on urandom with GRND_NONBLOCK in a loop
> printing a warning to dropbear_log() if it is blocking (not
> yet initialised) and keep waiting. dbrandom.c process_file()
> already has some lo
* Andrew Bainbridge [2016-07-26 11:20:01 +]:
> Andrew Bainbridge microsoft.com> writes:
>
> My embedded device is running Linux 3.4.0. I couldn't find
> a package of kernel 3.4.0 kernel headers available on
> Raspbian package manager, so I installed the nearest, which
> was linux-headers-3
* Andrew Bainbridge [2016-07-26 11:20:01 +]:
> But then I end up with a error message from line 30 of
> /usr/include/arm-linux-gnueabihf/bits/types.h. The compiler
> complains about the keyword "typedef". The previous line was
this is your problem:
you are using a glibc based cross compiler
* Hugo Genesse [2017-12-01 04:51:08 +]:
> I've been trying to use dropbear (compiled myself statically with
> ./configure; make STATIC=1) on a Alpine Linux Docker container (Linux
> 4.13.12-1-ARCH) with the latest Alpine Docker image (3.6 if I'm not
> mistaken). I run dropbear like this: "./dr
by it seems to be enabled by default and I would prefer just
> drop a binary on the device to enable ssh without changes to the system.
> Here is the openwrt page I'm referring:
> https://wiki.openwrt.org/doc/uci/dropbear
>
> Thanks!
>
> "Daniel." a écrit :
>
* Matt Johnston [2017-12-01 16:53:33 +]:
> Statically linking glibc isn't sufficient to make
it's not glibc if it's on alpine linux
* Hugo Genesse [2017-12-01 18:57:02 +]:
>
> -vvv on dropbear doesn't seem to be a valid option:
>
> 67b4c38f79c6:/usr/lib# /root/dropbear -R -E -vvv
> Invalid option -v
>
> Is my command correct?
>
ah -v is only supported if dropbear is built with CFLAGS=-DDEBUG_TRACE
hello, when dropbear server runs on host
$ echo hi | ssh user@host 'cat'
works as expected (so reading stdin works), but
$ echo hi | ssh user@host 'cat /proc/self/fd/0'
fails with EPERM (the open syscall in cat that is).
it seems the /proc file is user owned but it's a magic symlink
to a pipe
* Jamie Lokier [2020-05-01 17:10:24 +0100]:
> Hi Matt,
>
> > Not really sure of a good workaround.
>
> You can fchmod() or fchown() the pipe descriptor, with fchown() being more
> secure.
>
> # echo hello | (ls -lL /proc/self/fd/0; sudo -u nobody cat
> /proc/self/fd/0)
> prw--- 1
10 matches
Mail list logo
