rssh-discuss Mailing List for rssh (Page 35)
Brought to you by:
xystrus
You can subscribe to this list here.
2003 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(4) |
Jun
(1) |
Jul
(15) |
Aug
(33) |
Sep
(5) |
Oct
(15) |
Nov
(8) |
Dec
(4) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2004 |
Jan
(5) |
Feb
|
Mar
(5) |
Apr
(4) |
May
(4) |
Jun
(15) |
Jul
(9) |
Aug
(11) |
Sep
(5) |
Oct
(2) |
Nov
|
Dec
(6) |
2005 |
Jan
(8) |
Feb
(6) |
Mar
(43) |
Apr
(2) |
May
(5) |
Jun
(6) |
Jul
(12) |
Aug
(22) |
Sep
(5) |
Oct
(7) |
Nov
(15) |
Dec
(5) |
2006 |
Jan
(60) |
Feb
(7) |
Mar
(12) |
Apr
(7) |
May
(5) |
Jun
(14) |
Jul
(19) |
Aug
(21) |
Sep
(16) |
Oct
(2) |
Nov
(15) |
Dec
(3) |
2007 |
Jan
|
Feb
|
Mar
|
Apr
(24) |
May
|
Jun
(26) |
Jul
(12) |
Aug
(1) |
Sep
(7) |
Oct
(2) |
Nov
|
Dec
(1) |
2008 |
Jan
(4) |
Feb
(6) |
Mar
(4) |
Apr
(4) |
May
(5) |
Jun
(4) |
Jul
(4) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2009 |
Jan
|
Feb
(27) |
Mar
(20) |
Apr
(8) |
May
(1) |
Jun
(1) |
Jul
|
Aug
(3) |
Sep
(2) |
Oct
(1) |
Nov
|
Dec
|
2010 |
Jan
(3) |
Feb
(1) |
Mar
(3) |
Apr
|
May
|
Jun
(4) |
Jul
(7) |
Aug
(6) |
Sep
(7) |
Oct
(1) |
Nov
|
Dec
|
2011 |
Jan
|
Feb
(5) |
Mar
(5) |
Apr
(16) |
May
|
Jun
(6) |
Jul
(20) |
Aug
(10) |
Sep
(4) |
Oct
|
Nov
|
Dec
(7) |
2012 |
Jan
(5) |
Feb
|
Mar
(9) |
Apr
|
May
(6) |
Jun
(3) |
Jul
(1) |
Aug
|
Sep
|
Oct
(1) |
Nov
(5) |
Dec
(6) |
2013 |
Jan
|
Feb
|
Mar
(5) |
Apr
|
May
|
Jun
|
Jul
(2) |
Aug
(2) |
Sep
(3) |
Oct
(1) |
Nov
(1) |
Dec
|
2014 |
Jan
(5) |
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
(7) |
Sep
|
Oct
|
Nov
|
Dec
|
2015 |
Jan
|
Feb
|
Mar
|
Apr
(4) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(2) |
Nov
(7) |
Dec
|
2016 |
Jan
|
Feb
|
Mar
(4) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(11) |
Nov
|
Dec
|
2018 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(2) |
2019 |
Jan
(8) |
Feb
(17) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(3) |
Dec
|
2020 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(1) |
Dec
|
2021 |
Jan
(4) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2022 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(1) |
Nov
|
Dec
|
From: Derek M. <co...@pi...> - 2003-06-07 15:27:52
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hey kids, There is a bug in rssh v2.0.0 - v2.0.2 which may or may not be serious (but it's definitely braindead). I'm not an exploit writer, nor am I an expert at code security, but it strikes me that this one could possibly be an easy local root. I committed a major brain-fart, and forgot to check to see if some command-line parameters actually existed before trying to access them in the SUID chroot helper program for rssh v2.0.x (where x <= 2). This bug is fixed in rssh v2.0.3, which you can get from the rssh home page here: http://www.pizzashack.org/rssh/ Along with this bug, several other bugs are fixed including one which prevents access via scp with chroot jails. Some improvements were made in the build environment for non-Linux platforms, and some minor improvements were made in the documentation as well. There are no known exploits for the bug I mentioned above yet; nevertheless I recommend that all users of rssh v2.0.x upgrade to 2.0.3 immediately. Thanks - -- Derek Martin co...@pi... GPG Key ID: 0x81CFE75D -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+4gRYdjdlQoHP510RAhmDAJ41iF83y1qY5wUSwKfhbDgrTlouBACgnlb2 v8Sfyz8c0UCHCpeLgD+eB/s= =q9AU -----END PGP SIGNATURE----- |
From: Shapiro, D. <dav...@bt...> - 2003-05-23 14:35:16
|
Here is the chroot setup I used on solaris 2.8. etc: total 16 drwxr-xr-x 16 root other 512 May 23 08:35 .. -rw-r--r-- 1 root other 472 May 12 16:35 group -rwxr-xr-x 1 root other 912 May 12 16:34 passwd drwxr-xr-x 2 root sys 512 May 12 16:19 . -rwxr-xr-x 1 root other 3156 May 12 15:09 profile dev: made with mknod command total 4 drwxr-xr-x 16 root other 512 May 23 08:35 .. drwxr-xr-x 2 root sys 512 May 12 15:54 . crwxr-xr-x 1 root other 13, 12 May 12 15:54 zero crwxr-xr-x 1 root other 21, 5 May 12 15:54 log crwxr-xr-x 1 root other 13, 2 May 12 15:54 null tmp: total 4 drwxr-xr-x 16 root other 512 May 23 08:35 .. drwxr-xr-x 2 root sys 512 May 12 15:43 . -rwxr-xr-x 1 root other 0 May 12 14:24 rssh.log usr: total 18 drwxr-xr-x 16 root other 512 May 23 08:35 .. drwxr-xr-x 2 root other 512 May 12 15:43 bin drwxr-xr-x 9 root sys 512 May 12 15:10 . drwxr-xr-x 5 root other 512 May 12 14:44 local drwxr-xr-x 3 root other 512 May 12 14:33 ccs drwxr-xr-x 2 root other 512 May 12 12:49 sbin drwxr-xr-x 3 root other 512 May 12 12:37 share drwxr-xr-x 3 root other 512 May 12 12:25 lib drwxr-xr-x 3 root other 512 May 9 18:09 platform usr/bin: total 68 drwxr-xr-x 2 root other 512 May 12 15:43 . -rwxr-xr-x 1 root other 7696 May 12 15:43 id -rwxr-xr-x 1 root other 18120 May 12 15:10 ls -rwxr-xr-x 1 root other 5380 May 12 15:10 env drwxr-xr-x 9 root sys 512 May 12 15:10 .. usr/local: total 10 drwxr-xr-x 2 root other 512 May 12 15:19 bin drwxr-xr-x 9 root sys 512 May 12 15:10 .. drwxr-xr-x 5 root other 512 May 12 14:44 . drwxr-xr-x 2 root other 512 May 12 14:44 lib drwxr-xr-x 2 root other 512 May 9 18:14 libexec usr/local/bin: total 134 -rwxr-xr-x 1 root other 10264 May 12 15:50 rssh_chroot_helper drwxr-xr-x 2 root other 512 May 12 15:19 . drwxr-xr-x 5 root other 512 May 12 14:44 .. -rwxr-xr-x 1 root other 34332 May 12 10:11 scp -rwxr-xr-x 1 root other 19800 May 9 18:31 rssh usr/local/lib: total 4 drwxr-xr-x 2 root other 512 May 12 14:44 . drwxr-xr-x 5 root other 512 May 12 14:44 .. usr/local/libexec: total 168 drwxr-xr-x 5 root other 512 May 12 14:44 .. -rwxr-xr-x 1 root other 83108 May 12 10:12 sftp-server drwxr-xr-x 2 root other 512 May 9 18:14 . usr/ccs: total 6 drwxr-xr-x 9 root sys 512 May 12 15:10 .. drwxr-xr-x 2 root other 512 May 12 14:33 bin drwxr-xr-x 3 root other 512 May 12 14:33 . usr/ccs/bin: total 68 drwxr-xr-x 2 root other 512 May 12 14:33 . -rwxr-xr-x 1 root other 32536 May 12 14:33 m4 drwxr-xr-x 3 root other 512 May 12 14:33 .. usr/sbin: total 152 drwxr-xr-x 9 root sys 512 May 12 15:10 .. drwxr-xr-x 2 root other 512 May 12 12:49 . -rwxr-xr-x 1 root other 75448 May 12 12:49 syslogd usr/share: total 6 drwxr-xr-x 9 root sys 512 May 12 15:10 .. drwxr-xr-x 3 root other 512 May 12 12:37 . drwxr-xr-x 3 root other 512 May 12 12:37 lib usr/share/lib: total 6 drwxr-xr-x 3 root other 512 May 12 12:37 . drwxr-xr-x 3 root other 512 May 12 12:37 .. drwxr-xr-x 3 root other 512 May 12 12:37 zoneinfo usr/share/lib/zoneinfo: total 6 drwxr-xr-x 2 root other 512 May 12 12:38 US drwxr-xr-x 3 root other 512 May 12 12:37 . drwxr-xr-x 3 root other 512 May 12 12:37 .. usr/share/lib/zoneinfo/US: total 8 drwxr-xr-x 2 root other 512 May 12 12:38 . -rwxr-xr-x 1 root other 1250 May 12 12:38 Eastern drwxr-xr-x 3 root other 512 May 12 12:37 .. usr/lib: total 5222 drwxr-xr-x 9 root sys 512 May 12 15:10 .. -rwxr-xr-x 1 root other 19876 May 12 12:27 libmp.so.2 drwxr-xr-x 2 root other 512 May 12 12:25 security drwxr-xr-x 3 root other 512 May 12 12:25 . -rwxr-xr-x 1 root other 21538 May 12 12:25 nss_winbind.so.1 -rwxr-xr-x 1 root other 27884 May 12 12:24 nss_files.so.1 -rwxr-xr-x 1 root other 41500 May 12 12:23 libgen.so.1 -rwxr-xr-x 1 root other 1126044 May 12 12:23 libc.so.1 -rwxr-xr-x 1 root other 33732 May 12 12:23 libpam.so.1 -rwxr-xr-x 1 root other 4908 May 12 12:23 libdl.so.1 -rwxr-xr-x 1 root other 838536 May 12 12:23 libnsl.so.1 -rwxr-xr-x 1 root other 56988 May 12 12:23 libsocket.so.1 -rwxr-xr-x 1 root other 118296 May 12 12:22 libbsm.so.1 -rwxr-xr-x 1 root other 19188 May 12 12:22 libcmd.so.1 -rwxr-xr-x 1 root other 15084 May 12 12:22 libcrypt_i.so.1 -rwxr-xr-x 1 root other 40012 May 12 10:14 libaio.so.1 -rwxr-xr-x 1 root other 41572 May 12 10:13 librt.so.1 -rwxr-xr-x 1 root other 211268 May 9 18:35 ld.so.1 usr/lib/security: total 308 drwxr-xr-x 2 root other 512 May 12 12:25 . -rwxr-xr-x 1 root other 140980 May 12 12:25 pam_unix.so.1 drwxr-xr-x 3 root other 512 May 12 12:25 .. usr/platform: total 6 drwxr-xr-x 9 root sys 512 May 12 15:10 .. drwxr-xr-x 3 root other 512 May 9 18:09 . drwxr-xr-x 3 root other 512 May 9 18:09 SUNW,Ultra-4 usr/platform/SUNW,Ultra-4: total 6 drwxr-xr-x 2 root other 512 May 9 18:10 lib drwxr-xr-x 3 root other 512 May 9 18:09 . drwxr-xr-x 3 root other 512 May 9 18:09 .. usr/platform/SUNW,Ultra-4/lib: total 38 drwxr-xr-x 2 root other 512 May 9 18:10 . -rwxr-xr-x 1 root other 17256 May 9 18:10 libc_psr.so.1 drwxr-xr-x 3 root other 512 May 9 18:09 .. bin: total 620 drwxr-xr-x 16 root other 512 May 23 08:35 .. drwxr-xr-x 2 root bin 512 May 12 15:08 . -rwxr-xr-x 1 root other 18120 May 12 15:08 ls -rwxr-xr-x 1 root other 193804 May 12 15:08 ksh -rwxr-xr-x 1 root other 91836 May 12 15:07 sh var: total 14 drwxr-xr-x 16 root other 512 May 23 08:35 .. drwxr-xr-x 2 root other 512 May 12 12:47 adm drwxr-xr-x 2 root other 512 May 12 12:31 ld drwxr-xr-x 7 root sys 512 May 12 12:30 . drwxr-xr-x 3 root other 512 May 12 10:34 run drwxr-xr-x 2 root other 512 May 12 10:29 log drwxr-xr-x 2 root other 512 May 9 18:04 empty var/adm: total 4 drwxr-xr-x 2 root other 512 May 12 12:47 . -rwxr-xr-x 1 root other 0 May 12 12:47 wtmp -rwxr-xr-x 1 root other 0 May 12 12:47 wtmpx drwxr-xr-x 7 root sys 512 May 12 12:30 .. -rwxr-xr-x 1 root other 0 May 12 10:29 messages var/ld: total 64 drwxr-xr-x 2 root other 512 May 12 12:31 . -rwxr-xr-x 1 root other 30336 May 12 12:31 ld.config drwxr-xr-x 7 root sys 512 May 12 12:30 .. var/run: total 6 drwxr-xr-x 7 root sys 512 May 12 12:30 .. drwxr-xr-x 3 root other 512 May 12 10:34 . drwxr-xr-x 2 root other 512 May 12 10:34 log var/run/log: total 4 drwxr-xr-x 2 root other 512 May 12 10:34 . drwxr-xr-x 3 root other 512 May 12 10:34 .. var/log: total 4 drwxr-xr-x 7 root sys 512 May 12 12:30 .. drwxr-xr-x 2 root other 512 May 12 10:29 . -rwxr-xr-x 1 root other 0 May 12 10:29 sudo -rwxr-xr-x 1 root other 0 May 12 10:29 authlog var/empty: total 4 drwxr-xr-x 7 root sys 512 May 12 12:30 .. drwxr-xr-x 2 root other 512 May 9 18:04 . -----Original Message----- From: Derek Martin [mailto:co...@pi...] Sent: Friday, May 23, 2003 6:53 AM To: 'rss...@li...' Subject: Re: solaris chroot setups? -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, May 12, 2003 at 12:10:17PM -0400, Shapiro, David wrote: > The user of interest line looks something like the following: > cmg:x:2099:14:CMG:/u02/ftp/cmg:/usr/local/bin/rssh > > I am not sure what to do about logging and chroot for solaris or what I need > for the dynamic linker (is this needed for solaris?) Yeah, the linker is needed for solaris. I can't tell you what you need for it, since I don't have a Solaris machine. If you feel like sending me one... =8^) > If I do not use chrootpath, the login works fine and it denies ssh type > logins. If I enable th chrootpath option in /usr/local/etc/rssh.conf, it > drops the connection immediately. I am not sure if this is a fair test, but > running rssh_chroot_helper alone with no options causes a segmentation > fault. Hmmm. It shouldn't segfault. That's bad. I'll need to look into why. But at the moment, I'm vacationing in Asia, so it won't happen soon. Hopefully it's a linker issue, not a bug... - -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0xDFBEAD02 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+zf18djdlQoHP510RAoTvAJ9g6CCe8tY0pfFhE1xt1U1UPoHrogCgmYyh KSBU6Vb99SjuczcuzYb/d/8= =wAKG -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge _______________________________________________ rssh-discuss mailing list rss...@li... https://lists.sourceforge.net/lists/listinfo/rssh-discuss |
From: MAL <ma...@ko...> - 2003-05-19 18:14:23
|
Hi ppl, Is there any way to get sftp and/or scp to change to a different starting directory on connect. I don't mean from a user's point of view.. I know sftp <user@host:/dir> works.. I mean on the server end. With bash, I used to set each user's .bashrc/.bash_profile to read: cd /www/<user> export PWD='/www/<user>' and that did the trick in just about every scp/sftp client I tested. How can I get this effect with rssh? The system in question has redhat's patched openssh 3.1p1-5, which I assume supports ~/.ssh/rc and/or ~/.ssh/environment, but adding the above commands to either of those yeilded nothing. Anyone? :) MAL |
From: Shapiro, D. <dav...@bt...> - 2003-05-12 18:02:24
|
I commented out sections of rssh_chroot_helper.c until I could identify a problem area. I found that logging was core dumping using the syslog.h. I replaced this with a standard log using fopen and ran it again. The error I receive when a client connects is as follows: Connecting to butter... cmj@butter's password: Received message too long 1165128303 Any ideas what might be going on here? I use gcc 3.0, solaris 7 running in 32-bit mode. ssh is openssh 3.6.1p2. David |
From: Shapiro, D. <dav...@bt...> - 2003-05-12 16:14:21
|
Anybody have the steps involved with setting up a chroot setup for rssh on solaris? I did the following so far: In /usr/local/etc/rssh.conf I set the chrootpath=/u02/ftp In /u02/ftp, I created: cmg # user etc # for password dev # created to make logging work, but not sure how to get his working in solaris var # same things for logging lib # to put libraries usr/local/bin # for the executables usr/local/libexec # for sftp-server usr/platform/SUNW,Ultra-4/lib # was a library listed as used by the executables I ran ldd on scp, sftp-server, and rssh_chroot_helper rssh_chroot_helper: libc.so.1 => /usr/lib/libc.so.1 libdl.so.1 => /usr/lib/libdl.so.1 /usr/platform/SUNW,Ultra-4/lib/libc_psr.so.1 scp: librt.so.1 => /usr/lib/librt.so.1 libsocket.so.1 => /usr/lib/libsocket.so.1 libnsl.so.1 => /usr/lib/libnsl.so.1 libc.so.1 => /usr/lib/libc.so.1 libaio.so.1 => /usr/lib/libaio.so.1 libdl.so.1 => /usr/lib/libdl.so.1 libmp.so.2 => /usr/lib/libmp.so.2 /usr/platform/SUNW,Ultra-4/lib/libc_psr.so.1 sftp-server: librt.so.1 => /usr/lib/librt.so.1 libsocket.so.1 => /usr/lib/libsocket.so.1 libnsl.so.1 => /usr/lib/libnsl.so.1 libc.so.1 => /usr/lib/libc.so.1 libaio.so.1 => /usr/lib/libaio.so.1 libdl.so.1 => /usr/lib/libdl.so.1 libmp.so.2 => /usr/lib/libmp.so.2 /usr/platform/SUNW,Ultra-4/lib/libc_psr.so.1 I copied these libraries to /u02/ftp/lib and /u02/ftp/usr/platform/SUNW,Ultra-4/lib I copied /etc/passwd to /u02/ftp/etc The user of interest line looks something like the following: cmg:x:2099:14:CMG:/u02/ftp/cmg:/usr/local/bin/rssh I am not sure what to do about logging and chroot for solaris or what I need for the dynamic linker (is this needed for solaris?) If I do not use chrootpath, the login works fine and it denies ssh type logins. If I enable th chrootpath option in /usr/local/etc/rssh.conf, it drops the connection immediately. I am not sure if this is a fair test, but running rssh_chroot_helper alone with no options causes a segmentation fault. David |