openssh bugs - Oct 2013 - [Bug 2160] New: Option to disable ~/.ssh/rc in sshd_config

https://bugzilla.mindrot.org/show_bug.cgi?id=2160

            Bug ID: 2160
           Summary: Option to disable ~/.ssh/rc in sshd_config
           Product: Portable OpenSSH
           Version: 6.2p1
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: ryan_cox at byu.edu

There is an option in ~/.authorized_keys to disable ~/.ssh/rc but none
in sshd_config.  We have hundreds of users and would like to disable
~/.ssh/rc globally so that /etc/ssh/sshrc will run for all users.  A
new option in sshd_config would be a good solution.

I would be fine with either or both of the following solutions:
* An option to disable user ~/.ssh/rc completely
* An option to run /etc/ssh/sshrc then run ~/.ssh/rc if it exists

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2160

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
           Assignee|unassigned-bugs at mindrot.org |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Created attachment 2452
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2452&action=edit
PermitUserRC option for sshd_config

This adds a PermitUserRC option for sshd_config

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2160

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
             Blocks|                            |2226

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2160

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|ASSIGNED                    |RESOLVED

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
patch applied - this will be in openssh-6.7. Thanks!

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2160

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Damien Miller <djm at mindrot.org> ---
Close all bugs left open from 6.6 and 6.7 releases.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.