bugzilla-daemon at mindrot.org
2025-Feb-13  22:33 UTC
[Bug 3788] New: "sshd -T" describes "PermitRootLogin prohibit-password" as "without-password"
https://bugzilla.mindrot.org/show_bug.cgi?id=3788
            Bug ID: 3788
           Summary: "sshd -T" describes "PermitRootLogin
                    prohibit-password" as "without-password"
           Product: Portable OpenSSH
           Version: 9.9p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: cjwatson at debian.org
Created attachment 3860
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3860&action=edit
Don't describe "PermitRootLogin prohibit-password" as
"without-password"
If you have PermitRootLogin set to prohibit-password (i.e. the
default), then "sshd -T" still describes it using the old
"without-password" spelling.  I think it should describe it using the
non-deprecated spelling.  Patch attached.
Originally reported by Patrice Duroux in
https://bugs.debian.org/1095922.
-- 
You are receiving this mail because:
You are watching the assignee of the bug.
bugzilla-daemon at mindrot.org
2025-May-22  04:16 UTC
[Bug 3788] "sshd -T" describes "PermitRootLogin prohibit-password" as "without-password"
https://bugzilla.mindrot.org/show_bug.cgi?id=3788
Darren Tucker <dtucker at dtucker.net> changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net
             Blocks|                            |3808
Referenced Bugs:
https://bugzilla.mindrot.org/show_bug.cgi?id=3808
[Bug 3808] Tracking bug for OpenSSH 10.1
-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
bugzilla-daemon at mindrot.org
2025-May-22  04:22 UTC
[Bug 3788] "sshd -T" describes "PermitRootLogin prohibit-password" as "without-password"
https://bugzilla.mindrot.org/show_bug.cgi?id=3788
Darren Tucker <dtucker at dtucker.net> changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED
--- Comment #1 from Darren Tucker <dtucker at dtucker.net> ---
Patch applied upstream and will be in 10.1.  Thanks for the report.
-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
Possibly Parallel Threads
- sshd: ssh_config default setting - PermitRootLogin yes
 - [Bug 486] "PermitRootLogin no" can implicitly reveal root password
 - [Bug 1216] Warn via Logwatch when sshd PermitRootLogin is in effect
 - [Bug 3808] New: Tracking bug for OpenSSH 10.1
 - "PermitRootLogin no" fails