The Linux/Unix-port of OpenSSH-1.2.3 in sshd.c:allowed_user() denies
Login to users with an empty shell-field in /etc/passwd. According
to the docs this is wrong and an empty shell-field should default to
/bin/sh.
I'm sure that this is what was intended, because code and comment get
it right in sshd.c:do_child():
* Get the shell from the password data. An empty shell field is
* legal, and means /bin/sh.
A patch is attached.
Cheers, Theo
Login to users with an empty shell-field in /etc/passwd. According
to the docs this is wrong and an empty shell-field should default to
/bin/sh.
I'm sure that this is what was intended, because code and comment get
it right in sshd.c:do_child():
* Get the shell from the password data. An empty shell field is
* legal, and means /bin/sh.
A patch is attached.
Cheers, Theo
Attached Files:
-
openssh.patch (0.72 KB)