[Bug 1549] New: change in remote command execution behavior

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu Jan 8 07:29:57 EST 2009


           Summary: change in remote command execution behavior
           Product: Portable OpenSSH
           Version: 5.1p1
          Platform: amd64
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: kaizaad at sharcnet.ca

I have sent the following info the the list:


but have not heard anything. Can this be classified as a bug, even
though it is working as documented _but_ is a drastic change in
behavior from the previous versions (don't know how far this goes

I have reproduced the output here:

OS and kernel:
Red Hat Enterprise Linux AS release 4 (Nahant Update 5)
Linux host135 2.6.9-67.9hp.7sp.XCsmp #1 SMP Thu Jul 3 18:55:59 EDT 2008
x86_64 x86_64 x86_64 GNU/Linux

built both openssh-5.0p1 and openssh-5.1p1 with the following options:
./configure --prefix=/usr --libexecdir=/usr/libexec/openssh
--localstatedir=/var/empty/sshd \
--sysconfdir=/etc/ssh --with-pam --with-md5-passwords
--with-zlib=/home/XXX/software/zlib-1.2.3 \

With everything else being identical and just swapping the sshd
I noticed the following:

# ssh -v host135
debug1: match: OpenSSH_5.0 pat OpenSSH*
# ssh host135 'echo $PATH'

# ssh -v host135
debug1: match: OpenSSH_5.1 pat OpenSSH*
# ssh host135 'echo $PATH'

According to the docs, the behavior exhibited by v5.1 is correct,
command execution should not process the user's login shell and env.
why was this happening in v5.0? I can't find anything in the 5.1 change 
log that explains this change in behavior.

Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

More information about the openssh-bugs mailing list