From: Rainer Schwierz (R.Schwierz@physik.tu-dresden.de)
Date: Fri Sep 19 2003 - 10:42:17 EDT
Hi all,
first, thanks for all the hints I have got.
original message was:
did somone test openssh-3.7p1 on tru64 V4.0d (I know it is very old..) ?
Like the old versions it compiles without problems, but
openssh-3.6p2 is running without problems, but sshd under openssh-3.7p1
crashes with...
I have found two solutions,
- disable PrivilegeSeparation, it was working in 3.6.1p2 for Tru64
but the error is present in the current 3.7p1 release
- use a patch I have got in an email from
Nikola Milutinovic <Nikola.Milutinovic@ev.co.yu>
mailtext:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This has been noticed as a bug on Tru64 UNIX,
first reported on v5.1. Looks like the bug is in OpenSSH
code and is not related to the particular version of Tru64.
I have a mail with a patch to the 3.7p1 codebase.
The patch is from Chris Adams. Either use it or download from CVS
(or latest snapshots):
Yes, setreuid() and setregid() do not work right on
Tru64. Here is a
patch for 3.7p1 (should also apply to 3.7.1p1 but I
haven't had a
chance
to test yet). This has also been submitted and should
appear in the
next version of OpenSSH.
--
Chris Adams
Systems and Network Administrator - HiWAAY Internet
Services
I don't speak for anybody but myself - that's enough
trouble.
diff -urN openssh-3.7p1-dist/auth-sia.c
openssh-3.7p1/auth-sia.c
--- openssh-3.7p1-dist/auth-sia.c Mon Jun 2 19:25:48
2003
+++ openssh-3.7p1/auth-sia.c Tue Sep 16 14:02:56 2003
@@ -80,6 +80,7 @@
{
SIAENTITY *ent = NULL;
const char *host;
+ uid_t uid;
host = get_canonical_hostname(options.use_dns);
@@ -103,8 +104,11 @@
sia_ses_release(&ent);
- if (setreuid(geteuid(), geteuid()) < 0)
- fatal("setreuid: %s", strerror(errno));
+ uid = geteuid();
+ if (setuid(0) < 0)
+ fatal("setuid: %s", strerror(errno));
+ if (setuid(uid) < 0)
+ fatal("setuid: %s", strerror(errno));
}
#endif /* HAVE_OSF_SIA */
diff -urN openssh-3.7p1-dist/configure
openssh-3.7p1/configure
--- openssh-3.7p1-dist/configure Tue Sep 16 01:19:17
2003
+++ openssh-3.7p1/configure Tue Sep 16 14:11:31 2003
@@ -4532,6 +4532,18 @@
EOF
cat >>confdefs.h <<\EOF
+#define SETEUID_BREAKS_SETUID 1
+EOF
+
+ cat >>confdefs.h <<\EOF
+#define BROKEN_SETREGID 1
+EOF
+
+ cat >>confdefs.h <<\EOF
+#define BROKEN_SETREUID 1
+EOF
+
+ cat >>confdefs.h <<\EOF
#define DISABLE_LOGIN 1
EOF
diff -urN openssh-3.7p1-dist/configure.ac
openssh-3.7p1/configure.ac
--- openssh-3.7p1-dist/configure.ac Tue Sep 16
00:48:15 2003
+++ openssh-3.7p1/configure.ac Tue Sep 16 14:03:51
2003
@@ -395,6 +395,9 @@
fi
AC_DEFINE(DISABLE_FD_PASSING)
AC_DEFINE(BROKEN_GETADDRINFO)
+ AC_DEFINE(SETEUID_BREAKS_SETUID)
+ AC_DEFINE(BROKEN_SETREUID)
+ AC_DEFINE(BROKEN_SETREGID)
AC_DEFINE(LOCKED_PASSWD_SUBSTR, "Nologin")
;;
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
best wishes, Rainer
| R.Schwierz@physik.tu-dresden.de |
| Rainer Schwierz, Inst. f. Kern- und Teilchenphysik |
| TU Dresden, D-01062 Dresden |
| Tel. ++49 351 463 32957 FAX ++49 351 463 33114 |
| http://iktp.tu-dresden.de/~schwierz/ |
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:36 EDT