** Changed in: openssh (Ubuntu)
Assignee: Louis Bouchard (louis-bouchard) = (unassigned)
** Changed in: openssh (Ubuntu Saucy)
Assignee: Louis Bouchard (louis-bouchard) = (unassigned)
** Changed in: openssh (Ubuntu Precise)
Assignee: Louis Bouchard (louis-bouchard) = (unassigned)
This bug was fixed in the package openssh - 1:5.9p1-5ubuntu1.4
---
openssh (1:5.9p1-5ubuntu1.4) precise; urgency=medium
* Re-enable btmp logging, as its permissions were fixed a long time ago.
Backport from Debian and Trusty. (LP: #743858)
-- Louis Bouchard
This bug was fixed in the package openssh - 1:6.2p2-6ubuntu0.4
---
openssh (1:6.2p2-6ubuntu0.4) saucy; urgency=medium
* Re-enable btmp logging, as its permissions were fixed a long time ago.
Backport from Debian and Trusty. (LP: #743858)
-- Louis Bouchard
Hello Moses, or anyone else affected,
Accepted openssh into saucy-proposed. The package will build now and be
available at
http://launchpad.net/ubuntu/+source/openssh/1:6.2p2-6ubuntu0.4 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
Verified fix on both precise and saucy..
** Tags removed: verification-needed
** Tags added: verification-done
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/743858
Title:
sshd
** Patch removed: openssh_enable_btmp_saucy.debdiff
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/743858/+attachment/4055600/+files/openssh_enable_btmp_saucy.debdiff
** Patch removed: openssh_enable_btmp_precise.debdiff
New version of the debdiff from new version after security SRU
** Patch added: openssh_enable_btmp_precise_v2.debdiff
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/743858/+attachment/4092562/+files/openssh_enable_btmp_precise_v2.debdiff
--
You received this bug notification because
New version of the debdiff from new version after security SRU
** Patch added: openssh_enable_btmp_saucy_v2.debdiff
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/743858/+attachment/4092561/+files/openssh_enable_btmp_saucy_v2.debdiff
--
You received this bug notification because you
This was superceded by a security upload and will need to be redone for
Saucy and Precise.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/743858
Title:
sshd not appending to
Colin, do these patches make sense now?
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/743858
Title:
sshd not appending to /var/log/btmp
To manage notifications about this bug go
@laney, I verified that in precise/saucy/trusty /var/log/btmp is set to
0660. With that and Colin's comment in #5, I think these do make sense.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
Sponsored for P/S.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/743858
Title:
sshd not appending to /var/log/btmp
To manage notifications about this bug go to:
btmp logging has now been re-enabled in Debian (see Debian bug
#742775). It has also been synced back into Trusty. SRU is required for
Saucy Precise. I will take care of that
** Changed in: openssh (Ubuntu)
Status: Triaged = Confirmed
** Changed in: openssh (Ubuntu)
Assignee:
** Patch added: openssh_enable_btmp_saucy.debdiff
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/743858/+attachment/4055600/+files/openssh_enable_btmp_saucy.debdiff
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in
** Description changed:
+ SRU justification :
+ btmp logging had been removed in Debian a while ago due to protection to the
/var/log/btmp file. This restriction is no longer true so it has been
re-enabled on Debian.
+
+ Impact :
+ Failure to login using ssh will be recorded in /var/log/btmp.
** Also affects: openssh (Ubuntu Precise)
Importance: Undecided
Status: New
** Also affects: openssh (Ubuntu Saucy)
Importance: Undecided
Status: New
** Also affects: openssh (Ubuntu Trusty)
Importance: Medium
Assignee: Louis Bouchard (louis-bouchard)
Status:
** Changed in: openssh (Ubuntu Saucy)
Assignee: (unassigned) = Louis Bouchard (louis-bouchard)
** Changed in: openssh (Ubuntu Precise)
Assignee: (unassigned) = Louis Bouchard (louis-bouchard)
** Changed in: openssh (Ubuntu Saucy)
Importance: Undecided = Medium
** Changed in:
The permission check of openssh is relaxed in revision 1.88 of loginrec.c
http://anoncvs.mindrot.org/index.cgi/openssh/loginrec.c
Would be nice to see this as an update in Lucid becaue with permission mode
0660 of /var/log/btmp I see no security concerns.
--
You received this bug notification
/var/log/auth.log shows bad login attempts and I'd actually never heard
of lastb, but confirmed that in natty btmp is not updated with bad login
attempts from ssh.
** Changed in: openssh (Ubuntu)
Status: New = Confirmed
** Changed in: openssh (Ubuntu)
Importance: Undecided = Medium
--
This is actually not a bug. As of openssh (1:4.1p1-5), to close Debian
bug #314956, btmp logging was turned off. If you want that re-enabled,
please open a Debian bug.
** Changed in: openssh (Ubuntu)
Status: Confirmed = Won't Fix
--
You received this bug notification because you are a
Well, I was the one who turned that off, but I think we should keep this
bug open because the situation has changed. /var/log/btmp was mode 0664
in Debian when I made that change. Now, in Ubuntu (and possibly in
Debian, I haven't checked), it's mode 0660. This suggests to me that we
could
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/743858
Title:
sshd not appending to /var/log/btmp
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify
A known quirk of sshd in other distros is that sshd will refuse to write
to world- or group-readable /var/log/btmp. The fix for this is 'chmod
0600 /var/log/btmp'.
Ubuntu Linux installs /var/log/btmp with permissions 0660 (aka -rw-
rw). I already changed permissions to 0600 (aka -rw---)
23 matches
Mail list logo
