openssh unix dev - Jul 2002 - [Bug 125] with BSM auditing, cron editing thru ssh session causes cron jobs to fail

http://bugzilla.mindrot.org/show_bug.cgi?id=125





------- Additional Comments From jrj at purdue.edu  2002-07-14 13:31 -------
Created an attachment (id=131)
Update of bug #2 patch to 3.4p1




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=125





------- Additional Comments From jrj at purdue.edu  2002-07-14 13:38 -------
The above attachment includes an update of the original patch by Darren J.
Moffat at Sun for this problem.  I took his 3.1p1 based patch and:

  * updated it to 3.4p1

  * added autoconf support to auto-detect the need for the extra functions

  * fixed one incredibly minor potential (probably would never happen)
    memory leak

  * added support for earlier versions of Solaris (pre-IPv6, e.g. 2.6)

Note that if BSM is enabled, the code disables (with a warning) the
privilege separation feature.  This is because the audit functions must
be done as root, which is the parent of the two processes, and the data
would not flow back down into the child.  At least, I didn't see any
easy way to do it (but I didn't look all that hard).

If BSM is not enabled, privilege separation will be used (or not) as it
would without the patch.

John R. Jackson, Technical Software Specialist, jrj at purdue.edu




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=125

mouring at eviladmin.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dirk.bockmann at customs.gov.au



------- Additional Comments From mouring at eviladmin.org  2002-07-20 03:58
-------
*** Bug 363 has been marked as a duplicate of this bug. ***



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=125





------- Additional Comments From mouring at eviladmin.org  2002-07-20 04:05
-------
One does not just override the sshd_config.  Fail hard if Privsep and BSM are 
used together.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.