openssh unix dev - Apr 2002 - [Bug 220] sshd fails to read other users authorized_keys over nfs as root

http://bugzilla.mindrot.org/show_bug.cgi?id=220





------- Additional Comments From markus at openbsd.org  2002-04-18 06:01 -------
i think i've seen this before and it was related to
the realpath() implementation....



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=220





------- Additional Comments From aet at cc.hut.fi  2002-04-23 22:21 -------
Yup, realpath() was broken for AIX, probably Solaris as well.

HUT/CC is going to install OpenSSH for all OS's with
BROKEN_REALPATH defined. I think OpenSSH should reverse
the logic for BROKEN_REALPATH, eg. define SAFE_REALPATH
only for OS's that have a working realpath(), otherwise
use openbsd-compat/realpath.c by default.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=220





------- Additional Comments From aet at cc.hut.fi  2002-04-23 22:30 -------
Created an attachment (id=86)
One-liner patch for broken AIX realpath(), should apply to any recent version




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=220





------- Additional Comments From aet at cc.hut.fi  2002-04-23 22:33 -------
Created an attachment (id=87)
Alternative patch for realpath(); reverse the logic for BROKEN_REALPATH




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=220

djm at mindrot.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED



------- Additional Comments From djm at mindrot.org  2002-04-23 22:51 -------
The AIX patch has been applied, but I am reticent to apply the SAFE_REALPATH
patch. Is there any runtime test we could do to ascertain whether the libc
provided realpath() is broken?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=220





------- Additional Comments From aet at cc.hut.fi  2002-04-24 04:28 -------
Hmm, there could be. Anyway, it's more important to have
working code than worry about bloating the executable
with custom version of realpath(). At least XEmacs and
SSH-3.1.0 directly use their own versions of realpath(),
instead of trying to keep up with a list of broken
architectures or bloating configure.ac with complex
runtime tests etc.

So, how about just using always openbsd-compat/realpath.c?




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=220





------- Additional Comments From mouring at eviladmin.org  2002-04-24 04:34
-------
I would perfer a rewiew of our realpath.c if we are going to always use it.  As 
the person who put the code in I know I made a few minor short cuts to avoid 
importing in a ton of stuff from OpenBSD to get it to work under NeXT.

- Ben



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.