[Bug 1834128] Re: Multiple sshd services cannot be executed
Robie Basak
1834128 at bugs.launchpad.net
Wed Jul 3 14:39:01 UTC 2019
I'm sorry, your answer doesn't help complete this bug report, so I'm
setting the status back to Incomplete.
You may find it helpful to read "How to report bugs effectively"
http://www.chiark.greenend.org.uk/~sgtatham/bugs.html. We'd be grateful
if you would then provide a more complete description of the *problem*
that you're describing.
In particular, I expect your report to first demonstrate the *problem*,
not assume a solution. It will help if your problem statement includes
the headings "Steps to reproduce", "Expected behaviour" and "Actual
behaviour". Until you have done this I don't expect that your report
will make any progress.
Once you've done that, please change the bug status back to New. Until
you've done that, please leave the bug status as Incomplete.
** Changed in: openssh (Ubuntu)
Status: New => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1834128
Title:
Multiple sshd services cannot be executed
Status in openssh package in Ubuntu:
Incomplete
Bug description:
OpenSSH 7.6p1
Ubuntu 18.04.2 (LTS) (Bionic)
See also Ticket #1831765, #1690485, and #1832110 regarding the path of
the privilege separation directory (aka: /run/sshd).
The current Debian installer sets the RuntimeDirectory=sshd (i.e.
/run/sshd) in sshd.service (i.e. /lib/systemd/system/sshd.service) and
sshd at .service (i.e. /lib/systemd/system/sshd at .service). This is not
the best means of implementing this service. The problem is that the
systemd deletes the RuntimeDirectory resource as soon as the service
is stopped. When this happens, other sshd services will fault since
the privileged separation directory is no longer there. We need to
modify the configuration as follows:
1) Create /usr/lib/tmpfiles.d/sshd.conf that defines the /run/sshd directory with root:root as the owner and the protection of 0755.
2) Change the assignment of the RuntimeDirectory in sshd.service to something other than sshd (i.e. /run/sshd).
3) Change the assignment of the RuntimeDirectory in sshd at .service to something other than sshd (i.e. /run/sshd).
Both OpenSSH and Ubuntu have declined to provision a means of
adjusting the Privilege Separation directory. Since both teams do not
want to address this, we need to have a means of implementing multiple
instance sshd invocation using systemd and avoiding using the
RuntimeDirectory assignment of /run/sshd.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1834128/+subscriptions
More information about the foundations-bugs
mailing list