Call for testing: OpenSSH 6.8

[mikep at noc.utoronto.ca]

On Thu, 12 Mar 2015, Damien Miller wrote:

> On Wed, 11 Mar 2015, mikep at noc.utoronto.ca wrote:
>
>> sftp permissions: read-only setstat
>> XXX PRE RW: -r--------   1 root            0 Mar 11 17:48
>> /opt/local/src/security/openssh/regress/copy
>> XXX POST RW: -rwx------   1 root            0 Mar 11 17:48
>> /opt/local/src/security/openssh/regress/copy
>> XXX PRE RO: -r--------   1 root            0 Mar 11 17:48
>> /opt/local/src/security/openssh/regress/copy
>> XXX POST RO: -r--------   1 root            0 Mar 11 17:48
>
> Thanks. It looks like sftp-server is behaving correctly but the test
> logic isn't. Specifically, it seems 'test ! -x $COPY' is returning
> false even though $COPY is not executable.
>
> I've not seen Solaris' test behave like this before, so I'm not sure
> what is going on here...

I had the same issue with OpenSSH 6.7, which was never resolved; we do 
have '/usr/ucb' on our paths, but I renamed '/usr/ucb/test' to 
'/usr/ucb/test.sav' many years ago as it messed up other builds/installs.

Any other tests/checks I can run?

> -d

Mike
--
Mike Peterson                            Information Security Analyst - Audit
E-mail: mikep at noc.utoronto.ca                WWW: http://www.noc.utoronto.ca/
Tel: 416-978-5230                                           Fax: 416-978-6620