Public bug reported:

strictmodes does not work

1) lsb_release -rd
Description:    Ubuntu Bionic Beaver (development branch)
Release:        18.04

2) aptitude versions openssh-server
p A 1:7.5p1-10   bionic           500
i A 1:7.6p1-2    bionic-proposed  500

sshd -T| grep strictm
strictmodes yes

ls -la /home/account/.ssh/
total 12
drwxr-xr-x 2 root root 4096 Nov  8 12:48 .
drwxr-xr-x 4 account  account  4096 Nov  8 12:48 ..
-rw-r--r-- 1 root root  743 Nov  8 12:48 authorized_keys

3) the service sshd(8) should check file modes and ownership of the
user's files and home directory before accepting login.

4)
Nov  8 14:14:44 bionic sshd[22476]: Connection from 10.10.10.10 port 41784 on 
10.10.10.1 port 22
Nov  8 14:14:44 bionic sshd[22476]: Postponed publickey for account from 
10.10.10.10 port 41784 ssh2 [preauth]
Nov  8 14:14:44 bionic sshd[22476]: Accepted publickey for account from 
10.10.10.10 port 41784 ssh2: RSA 
SHA256:WmtQr6OPSN+anUdU9e8t+W1eEjP4gQkIbRdNEoavHzY
Nov  8 14:14:44 bionic sshd[22476]: pam_unix(sshd:session): session opened for 
user account by (uid=0)
Nov  8 14:14:44 bionic systemd-logind[315]: New session 2127 of user account.
Nov  8 14:14:45 bionic sshd[22476]: User child is on pid 22490
Nov  8 14:14:45 bionic sshd[22490]: Starting session: shell on pts/1 for 
account from 10.10.10.10 port 41784 id 0
Nov  8 14:14:49 bionic sshd[22490]: Received disconnect from 10.10.10.10 port 
41784:11: disconnected by user
Nov  8 14:14:49 bionic sshd[22490]: Disconnected from user tdw 10.10.10.10 port 
41784
Nov  8 14:14:49 bionic sshd[22476]: pam_unix(sshd:session): session closed for 
user account

** Affects: linux-hwe-edge (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1730962

Title:
  u18: openssh

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-hwe-edge/+bug/1730962/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to