*** This bug is a security vulnerability ***

Public security bug reported:

scponlyc does not work (can not build chroot for it)
Don't know workarounds for scponlyc, other then using INSECURE scponly mode - 
therefore marking this as security bug.


scponly 4.8-4    on Ubuntu Lucid 64bit


Trying to follow say:
http://ubuntuforums.org/showthread.php?t=451510

scponlyc  (the CHROOTED version of scponly) does not work on new user,
its needed to build dir for chroot.

Using the described script does not work:

cd /usr/share/doc/scponly/setup_chroot
sudo gunzip setup_chroot.sh.gz

that script complains that scponlyc is not setup (while it IS set up correctly 
with that YES option
after skipping that warning, all is created, but it does not work
it can not find the lib

running: /usr/lib/sftp-server
failed: /usr/lib/sftp-server with error No such file or directory(2)

copying that /usr/lib/sftp-server  into chroot is not sufficient to fix this.
So I assume the make-chroot-script is not valid there.
Then it should be removed or upgraded.

Don't know workarounds for scponlyc, other then using INSECURE scponly mod - 
therefore marking this as security bug.
Or for using sftp from ssh (will that work?) and not using scponly at all (but 
then, is it as good solution?)

** Affects: scponly (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: lucid

** Package changed: ubuntu => scponly (Ubuntu)

** Visibility changed to: Public

-- 
scopnly - scponlyc fails to chroot and the make chroot script fails
https://bugs.launchpad.net/bugs/611400
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to