openssh bugs - Apr 2015 - [Bug 2374] New: please make single(!) addresses that cannot be bound to not failing sshd startup

https://bugzilla.mindrot.org/show_bug.cgi?id=2374

            Bug ID: 2374
           Summary: please make single(!) addresses that cannot be bound
                    to not failing sshd startup
           Product: Portable OpenSSH
           Version: 6.7p1
          Hardware: Other
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: calestyo at scientia.net

Hi.

Maybe it's just me, but it happens every now and then that I lock out
myself of a system because of wrong ListenAddress lines, i.e. addresses
sshd cannot bind to.

It would be nice if sshd would ignore these errors, but for security
reasons of course *only* if it can bind to at least one of the named
addresses (or if it would instead NOT simply bind to the wildcard
address).

At least right now I don't see any security implications of this
behavioural change.


Cheers,
Chris.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2374

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au

--- Comment #1 from Darren Tucker <dtucker at zip.com.au> ---
I'm not sure this is a good idea: you'll have a configuration error
that is ignored.  I'd suggest logging into the machine you're
reconfiguring in a new window/tab/screen session instead of logging out
and logging in again (or even just "ssh localhost").

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2374

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |WONTFIX
                 CC|                            |djm at mindrot.org

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
I agree with Darren here - we don't plan to add this, sorry.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2374

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Damien Miller <djm at mindrot.org> ---
closing resolved bugs as of 8.6p1 release

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.