Bug in OpenSSH / Config Checker

#1

Post by oherrala » Fri, Aug 28, 2020, 1:14 PM UTC

Bug in OpenSSH / Config Checker
puffy.nolink.ch

Re: Bug in OpenSSH / Config Checker

#2

Post by teddyh » Fri, Aug 28, 2020, 2:25 PM UTC

Sound like this, strictly speaking, is a bug in the config checker, not in the SSH daemon itself.

Re: Bug in OpenSSH / Config Checker

#3

Post by tssva » Fri, Aug 28, 2020, 3:31 PM UTC

teddyh wrote: post #2

Sound like this, strictly speaking, is a bug in the config checker, not in the SSH daemon itself.

Strictly speaking the config checker is part of the SSH daemon.

Re: Bug in OpenSSH / Config Checker

#4

Post by pferde » Fri, Aug 28, 2020, 5:49 PM UTC

teddyh wrote: post #2

Sound like this, strictly speaking, is a bug in the config checker, not in the SSH daemon itself.

Just like a flat tire is a problem with the tire, not with the car.

Re: Bug in OpenSSH / Config Checker

#5

Post by teddyh » Fri, Aug 28, 2020, 6:38 PM UTC

tssva wrote: post #3

teddyh wrote: post #2

Sound like this, strictly speaking, is a bug in the config checker, not in the SSH daemon itself.

Strictly speaking the config checker is part of the SSH daemon.

Not a part which is ever run when the SSH daemon is started normally.

Re: Bug in OpenSSH / Config Checker

#6

Post by theamk » Fri, Aug 28, 2020, 8:07 PM UTC

pferde wrote: post #4

teddyh wrote: post #2

Sound like this, strictly speaking, is a bug in the config checker, not in the SSH daemon itself.

Just like a flat tire is a problem with the tire, not with the car.

No, not really. The config checker is an entirely optional part, and I was not even aware it existed.

This situation is like “Ford dealership installed wrong tires on Ford truck when customer asked for them, causing an accident”. Yes, it is the same people, and the car ended up on the ditch, but I wouldn’t call this “problem with the car”

Re: Bug in OpenSSH / Config Checker

#7

Post by pferde » Sat, Aug 29, 2020, 9:48 AM UTC

theamk wrote: post #6

pferde wrote: post #4

Earlier quoted context omitted.

Just like a flat tire is a problem with the tire, not with the car.

No, not really. The config checker is an entirely optional part, and I was not even aware it existed. This situation is like “Ford dealership installed wrong tires on Ford truck when customer asked for them, causing an accident”. Yes, it is the same people, and the car ended up on the ditch, but I wouldn’t call this “problem with the car”

Fair enough, I did not read the article too carefully, and thought that the config checker was the part of sshd that validates the configuration when the daemon is starting.

Re: Bug in OpenSSH / Config Checker

#8

Post by dmarinus » Sat, Aug 29, 2020, 12:15 PM UTC

although this isn't nice I bet there are multiple ways to fool the config checker and not be able to login anymore.

Re: Bug in OpenSSH / Config Checker

#9

Post by tssva » Sat, Aug 29, 2020, 12:47 PM UTC

teddyh wrote: post #5

tssva wrote: post #3

Earlier quoted context omitted.

Strictly speaking the config checker is part of the SSH daemon.

Not a part which is ever run when the SSH daemon is started normally.

Now you are just trying to move the goal posts.

Re: Bug in OpenSSH / Config Checker

#10

Post by teddyh » Sun, Aug 30, 2020, 2:10 AM UTC

tssva wrote: post #9

teddyh wrote: post #5

Earlier quoted context omitted.

Not a part which is ever run when the SSH daemon is started normally.

Now you are just trying to move the goal posts.

Strictly speaking, I’m splitting hairs.