Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: openssh (Ubuntu)
Status: New = Confirmed
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
Debian has a Debian specific patch (user-group-modes.patch) that changes
the behavior compared to the upstream version of OpenSSH.
If a user ssh file or directory has a group write bit set and that group
has no other members besides the user then sshd now allows the use of
the ssh file or
@Frank: does your home belong to your own per-user group? If so,
StrictMode=yes might notice that and still allow login. In my case:
christian@alice$ ls -ld $HOME
drwx-- 24 christian christian 20480 Jul 23 03:44 /home/christian
= Now, setting $HOME to 0720 will still allow login with
FWIW, http://bugs.debian.org/119886 deals with a similar issue.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/954620
Title:
SSH StrictModes does not work correctly
To manage
** Changed in: openssh (Ubuntu)
Importance: Undecided = Medium
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/954620
Title:
SSH StrictModes does not work correctly
To manage
** Visibility changed to: Public
** This bug is no longer flagged as a security vulnerability
** Visibility changed to: Public
** This bug is no longer flagged as a security vulnerability
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed
