[Bug 4042] New: Agent forward doesn't work with not readable /home

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Sat Oct 24 00:35:37 AEDT 2026


https://bugzilla.mindrot.org/show_bug.cgi?id=4042

            Bug ID: 4042
           Summary: Agent forward doesn't work with not readable /home
           Product: Portable OpenSSH
           Version: 10.6p1
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: hasso at zone.ee

Created attachment 4012
  --> https://bugzilla.mindrot.org/attachment.cgi?id=4012&action=edit
Proposed patch

Agent forward doesn't work if path to the location of the socket to be
created contains a directory user doesn't have read access to – for
example if /home doesn't have read permission for other.

The problem is in misc.c:mkdir_path(). There is no reason to use
O_RDONLY in Linux, there is an O_PATH for that. This is Linux only
though and I'm not sure what other platforms should use. Maybe
O_SEARCH? But Linux doesn't have it.

Proposed patch is attached, tested in Linux only.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list