8 ms·

Bug in OpenSSH / Config Checker

• teddyh 6y ago
  Sound like this, strictly speaking, is a bug in the config checker, not in the SSH daemon itself.
  • tssva 6y ago
    Strictly speaking the config checker is part of the SSH daemon.
    • teddyh 6y ago
      Not a part which is ever run when the SSH daemon is started normally.
      • tssva 6y ago
        Now you are just trying to move the goal posts.
        • teddyh 6y ago
          Strictly speaking, I’m splitting hairs.
  • pferde 6y ago
    Just like a flat tire is a problem with the tire, not with the car.
    • theamk 6y ago
      No, not really. The config checker is an entirely optional part, and I was not even aware it existed. This situation is like “Ford dealership installed wrong tires on Ford truck when customer asked for them, causing an accident”. Yes, it is the same people, and the car ended up on the ditch, but I wouldn’t call this “problem with the car”
      • pferde 6y ago
        Fair enough, I did not read the article too carefully, and thought that the config checker was the part of sshd that validates the configuration when the daemon is starting.
• dmarinus 6y ago
  although this isn't nice I bet there are multiple ways to fool the config checker and not be able to login anymore.