[Bug 1461] New: session.c: don't chdir() after chroot() if chroot_path==pw->pw_dir

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Mon Apr 28 22:29:01 EST 2008


https://bugzilla.mindrot.org/show_bug.cgi?id=1461

           Summary: session.c: don't chdir() after chroot() if             
                    chroot_path==pw->pw_dir                                
    Classification: Unclassified                                           
           Product: Portable OpenSSH                                       
           Version: 5.0p1                                                  
          Platform: ix86                                                   
        OS/Version: Linux                                                  
            Status: NEW                                                    
          Severity: normal                                                 
          Priority: P2                                                     
         Component: sshd                                                   
        AssignedTo: bitbucket at mindrot.org                                  
        ReportedBy: kondi at artegence.com                                    


i have a setup where user directory is chroot directory
(ChrootDirectory %h). after user logs in it's presented with error
"Could not chdir to home directory /home/vhosts/user: No such file or
directory" which doesn't make sense with this setup and leaks
information about paths above chroot.

i expect that user should be left in chroot's root (from chdir() and
chroot() sequence in safely_chroot()) or chdir to $HOME setup by
pam_env.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list