Public bug reported:
strictmodes does not work
1) lsb_release -rd
Description: Ubuntu Bionic Beaver (development branch)
Release: 18.04
2) aptitude versions openssh-server
p A 1:7.5p1-10 bionic 500
i A 1:7.6p1-2 bionic-proposed 500
sshd -T| grep strictm
strictmodes yes
ls -la /home/account/.ssh/
total 12
drwxr-xr-x 2 root root 4096 Nov 8 12:48 .
drwxr-xr-x 4 account account 4096 Nov 8 12:48 ..
-rw-r--r-- 1 root root 743 Nov 8 12:48 authorized_keys
3) the service sshd(8) should check file modes and ownership of the
user's files and home directory before accepting login.
4)
Nov 8 14:14:44 bionic sshd[22476]: Connection from 10.10.10.10 port 41784 on
10.10.10.1 port 22
Nov 8 14:14:44 bionic sshd[22476]: Postponed publickey for account from
10.10.10.10 port 41784 ssh2 [preauth]
Nov 8 14:14:44 bionic sshd[22476]: Accepted publickey for account from
10.10.10.10 port 41784 ssh2: RSA
SHA256:WmtQr6OPSN+anUdU9e8t+W1eEjP4gQkIbRdNEoavHzY
Nov 8 14:14:44 bionic sshd[22476]: pam_unix(sshd:session): session opened for
user account by (uid=0)
Nov 8 14:14:44 bionic systemd-logind[315]: New session 2127 of user account.
Nov 8 14:14:45 bionic sshd[22476]: User child is on pid 22490
Nov 8 14:14:45 bionic sshd[22490]: Starting session: shell on pts/1 for
account from 10.10.10.10 port 41784 id 0
Nov 8 14:14:49 bionic sshd[22490]: Received disconnect from 10.10.10.10 port
41784:11: disconnected by user
Nov 8 14:14:49 bionic sshd[22490]: Disconnected from user tdw 10.10.10.10 port
41784
Nov 8 14:14:49 bionic sshd[22476]: pam_unix(sshd:session): session closed for
user account
** Affects: linux-hwe-edge (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1730962
Title:
u18: openssh
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-hwe-edge/+bug/1730962/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
