tech-userlevel archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Change to OpenSSH - HomeDirectory



On Fri, Jan 06, 2012 at 11:18:12AM -0500, D'Arcy Cain wrote:
> What is the process to change third party code?  I needed a change
> to openssh which I think is generally useful.  Here is the bugzilla
> report that I submitted to the OpenSSH project:
> 
> https://bugzilla.mindrot.org/show_bug.cgi?id=1951

I agree that a change is necessary. Damien et al should be pointed to
the recent ftpd advisory for FreeBSD for why chroot to home directory is
not necessarily a good idea. I can think of two alternatives that might
work better -- looking up the home directory *again* in the chroot and
removing the chroot prefix from the home directory.

Generally, it is preferable to have at least consensus upstream about
the functionality and supposedly the patch. Maintaining e.g. the HPN
patch is painful enough as it is.

Joerg


Home | Main Index | Thread Index | Old Index