[Bug 1832110] Re: Resource Sharing with multiple sshd services
Luke A. Perkins
public at epicdgs.us
Fri Jun 14 16:09:51 UTC 2019
This is a proposed patch of "disco-proposed" of the sshd.c file. I have
uploaded the original and the diff version.
** Attachment added: "The proposed changed sshd.c file in its entirety."
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1832110/+attachment/5270820/+files/sshd.c
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1832110
Title:
Resource Sharing with multiple sshd services
Status in openssh package in Ubuntu:
Won't Fix
Bug description:
Ubuntu: 18.04.2 LTS
OpenSSH: 7.6p1
I am having a problem starting multiple sshd processes. The default
location of the sshd privilege separation directory is hard-coded to
/run/sshd (see man page). If I want to have 2 sshd services using
systemd, I need to write 2 service files, let's call them
sshd_wan.service ans sshd_lan.service. Both of these services need to
have their own "RuntimeDirectory=sshd_wan" and
"RuntimeDirectory=sshd_lan". If you do not have separate
RuntimeDirectory definitions for the 2 services, then when one service
is killed/faults/restarts/stops/etc. the systemd (or init) process
deletes the RuntimeDirectory and causes the other service to crash
since a RuntimeDirectory does not exist.
The problem is the hard-coding of the sshd Privilege Separation
Directory. We need to modify the OpenBSD/OpenSSH sshd code to
provision command line assignment of the privilege separation
directory.
I have attempted to contact the OpenSSH team (i.e. OpenSSH.com) and
they say it is a Ubuntu problem. I reported this in Ubuntu bug
#1831765 and Ubuntu (e.g. Paride Legovini, June 6, 2019 @ 2:55AM PDT)
rejected it because I described the problem using the init.d example.
I know how to modify the sshd.c file in OpenSSH 7.6p1, the problem is
getting Ubuntu and OpenSSH to admit there is a problem and it needs to
be fixed.
The problem is still there regardless if you are using Upstart (i.e.
init.d) or systemd.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1832110/+subscriptions
More information about the foundations-bugs
mailing list