First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 192825
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Gentoo's Team for Core System packages <base-system@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Hans-Werner Hilse <hilse@web.de>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:

Filename Description Type Creator Created Size Actions
sshd-init-script--checkconfig-for-reloads-and-restarts.patch proposed fix, added check to reload(), added restart() w/ check patch Hans-Werner Hilse 2007-09-17 15:28 0000 395 bytes Details | Diff
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 192825 depends on: Show dependency tree
Bug 192825 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug


Description:   Opened: 2007-09-17 15:27 0000
/etc/init.d/sshd contains the function checkconfig() for sanity checking of
sshd setup and configuration (using sshd itself for the latter, see also "-t"
flag for sshd).

It does this only on "start", thus opening a problem path: Both "restart" and
"reload" (specific function for sshd) will shut down a running sshd even if it
cannot be started afterwards due to broken setup/configuration.

The patch to be attached by me will just insert the sanity check into
restarts/reloads as well, so the admin gets aware before locking himself out.

The lockout however can only be triggered if the admin logs out without caring
for the result of the restart/reload. Thus this bug's importance is quite low.

Reproducible: Always

Steps to Reproduce:
1. Make invalid change to sshd_config
2.a. /etc/init.d/sshd restart
2.b. /etc/init.d/sshd reload


Actual Results:  
sshd master process killed, no new one started up

Expected Results:  
sshd complaining on invalid configuration, old instance still running

------- Comment #1 From Hans-Werner Hilse 2007-09-17 15:28:23 0000 -------
Created an attachment (id=131160) [edit]
proposed fix, added check to reload(), added restart() w/ check

------- Comment #2 From SpanKY 2007-09-20 07:36:12 0000 -------
fixed in cvs, thanks for the suggestion

First Last Prev Next    No search results available      Search page      Enter new bug