[Bug 2058354] [NEW] Enabling FIPS breaks password hashing

2024-03-19 Thread Dominik Zäuner
Public bug reported: We are running x11vnc 0.9.16-8 on a FIPS enabled Ubuntu 22.04 with libvncserver1 0.9.13+dfsg-3build2 and libssl3 3.0.2-0ubuntu1.12+Fips1. With the fips=1 kernel parameter enabling FIPS, it seems that the password hashing is broken and only a clear text password is written:

[Bug 1970585] Re: Logic for PermitRootLogin in config script is flipped

2022-04-27 Thread Dominik Zäuner
Oh, I did just see the explanation in the postinst and templates file: Template: openssh-server/permit-root-login Type: boolean Default: true Description: Disable SSH password authentication for root? ** Changed in: openssh (Ubuntu) Status: New => Invalid -- You received this bug

[Bug 1970585] Re: Logic for PermitRootLogin in config script is flipped

2022-04-27 Thread Dominik Zäuner
** Description changed: In the config script of openssh-server, the debconf database is updated with the values that are read from sshd_config. But if I'm not mistaken the yes/no logic is flipped: if [ "$permit_root_login" = yes ]; then -  db_set openssh-server/permit-root-login

[Bug 1970585] Re: Logic for PermitRootLogin in config script is flipped

2022-04-27 Thread Dominik Zäuner
** Information type changed from Private Security to Public Security ** Description changed: In the config script of openssh-server, the debconf database is updated with the values that are read from sshd_config. But if I'm not mistaken the yes/no logic is flipped: if [