openssh bugs - Nov 2018 - [Bug 2937] New: Unable to disable $MAIL setting.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

            Bug ID: 2937
           Summary: Unable to disable $MAIL setting.
           Product: Portable OpenSSH
           Version: 7.9p1
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: major
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: sergio+it at outerface.net

I have commented out all pam_mail.so in all pam.d/*
I have commented out MAIL_DIR in login.defs

But I still have $MAIL set to /var/mail/sergio after ssh host.

Looks like it's from 2003:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=189920

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
MAIL is set implicitly by sshd, it being one of the environment
traditionally established by login(1). It might make sense to have sshd
skip this when PAM is in use, as that part of the session setup is
usually delegated to a PAM module.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|unassigned-bugs at mindrot.org |djm at mindrot.org
   Attachment #3210|                            |ok?
              Flags|                            |

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
Created attachment 3210
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3210&action=edit
Don't set $MAIL is PAM is in use

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net
   Attachment #3210|ok?                         |ok?(dtucker at dtucker.net)
              Flags|                            |

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|                            |2915


Referenced Bugs:

https://bugzilla.mindrot.org/show_bug.cgi?id=2915
[Bug 2915] Tracking bug for 8.0 release
-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

--- Comment #3 from Darren Tucker <dtucker at dtucker.net> ---
Comment on attachment 3210
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3210
Don't set $MAIL is PAM is in use

No that skips it when PAM is compiled in.  To skip it when PAM is in
use you need to also test options.use_pam:
>+#ifndef USE_PAM
    if (!options.use_pam) {
> 	snprintf(buf, sizeof buf, "%.200s/%.50s", _PATH_MAILDIR,
pw->pw_name);
> 	child_set_env(&env, &envsize, "MAIL", buf);
    }
>+#endif
with that change ok dtucker.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #3210|ok?(dtucker at dtucker.net)    |
              Flags|                            |
   Attachment #3210|0                           |1
        is obsolete|                            |
   Attachment #3239|                            |ok?(dtucker at dtucker.net)
              Flags|                            |

--- Comment #4 from Damien Miller <djm at mindrot.org> ---
Created attachment 3239
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3239&action=edit
check use_pam instead of preprocessor

w/ Darren's feedback

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #3239|ok?(dtucker at dtucker.net)    |ok+
              Flags|                            |

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

--- Comment #5 from Damien Miller <djm at mindrot.org> ---
This has been committed and will be in the OpenSSH 8.0 release.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #6 from Damien Miller <djm at mindrot.org> ---
Closing all resolved bug with release of openssh-8.2

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2937

Ahmed Sayeed <ahmedsayeed1982 at yahoo.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ahmedsayeed1982 at yahoo.com

--- Comment #7 from Ahmed Sayeed <ahmedsayeed1982 at yahoo.com> ---
imply that the third "n" argument is an additional boundary limit, not
the destination buffer capacity (ie. the destination buffer is not
implicitly SIZE_MAX), and both source and
https://www.webb-dev.co.uk/computers/what-is-ssl-certificate/ 
destination do not overlap (overlapping depends on the source and
destination layout
imply that the third "n" argument is an additional boundary limit, not
the destination buffer capacity (ie. the destination buffer is not
http://www.compilatori.com/category/tech/ implicitly SIZE_MAX), and
both source and destination do not overlap (overlapping depends on the
source and destination layout
imply that the third "n" argument is an additional boundary limit, not
the destination buffer capacity (ie. the destination buffer is not
http://www.acpirateradio.co.uk/category/services/ implicitly SIZE_MAX),
and both source and destination do not overlap (overlapping depends on
the source and destination layout
imply that the third "n" argument is an additional boundary limit, not
the destination buffer capacity (ie. the destination buffer is not
http://www.logoarts.co.uk/category/property/ implicitly SIZE_MAX), and
both source and destination do not overlap (overlapping depends on the
source and destination layout
imply that the third "n" argument is an additional boundary limit, not
the destination buffer capacity (ie. the destination
http://www.slipstone.co.uk/category/computers/ buffer is not implicitly
SIZE_MAX), and both source and destination do not overlap (overlapping
depends on the source and destination layout
imply that the third "n" argument is an additional boundary limit, not
the destination buffer capacity (ie. the destination buffer is not
implicitly SIZE_MAX), and both source and destination do not overlap
(overlapping http://embermanchester.uk/ depends on the source and
destination layout
imply that the third "n" argument is an additional boundary limit, not
the destination buffer capacity (ie. the destination buffer is not
implicitly SIZE_MAX), and both source and destination do
http://connstr.net/ not overlap (overlapping depends on the source and
destination layout
imply that the third "n" argument is an additional boundary limit, not
the destination buffer capacity (ie. the destination buffer is not
implicitly SIZE_MAX), and both http://joerg.li/ source and destination
do not overlap (overlapping depends on the source and destination
layout
imply that the third "n" http://www.jopspeech.com/ argument is an
additional boundary limit, not the destination buffer capacity (ie. the
destination buffer is not implicitly SIZE_MAX), and
http://www.wearelondonmade.com/ both source and destination do not
overlap (overlapping depends on the source and destination layout
imply that the
https://waytowhatsnext.com/computers/what-is-ssl-certificate/ third
"n"
argument is an additional boundary limit, not the destination buffer
capacity (ie. the destination buffer is not implicitly SIZE_MAX), and
http://www.iu-bloomington.com/shopping/safety-for-online-shopping/ both
source and destination do not overlap (overlapping depends on the
source and destination layout boundary limit, not the destination
buffer capacity (ie. the destination buffer
https://komiya-dental.com/crypto/bought-house-with-bitcoin/ is not
implicitly SIZE_MAX), and both source and destination do not overlap
(overlapping depends on the source and destination layout
boundary limit, not the destination buffer capacity
http://www-look-4.com/ (ie. the destination buffer is not implicitly
SIZE_MAX), and both source and destination do not overlap (overlapping
depends on the  source and destination layout

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.