X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 6E1B03858438
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1707333995;
	bh=gtt/Ce8lRjN3dsaQHQ790XB0iUQkScpiAK2bihW9Doo=;
	h=Date:To:Subject:References:In-Reply-To:List-Id:List-Unsubscribe:
	List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:
	From;
	b=uSjWRNbXGpPL2DBJvLarhI4moNOR2+WVVYveR1dBcoNw/IYLM/mDAb7X5ahpBhCO7
	b3nBtJTbCEIWl8XCjWQynZ/DqBy0FmfkIufp2J53dG8gmoVZeZ0gjtibDFKjLyQor+
	TvePvAeUnGJ/QJkqiEvN9thm4SVaQo80c7phdrTs=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org BC0F43858C29
Date:	Wed, 7 Feb 2024 20:25:25 +0100
To:	cygwin AT cygwin DOT com
Subject:	Re: cygsshd fails due to bad ownership or modes of /cygdrive/c/Users
Message-ID:	<ZcPZJbmzsawUQAMl@calimero.vinschen.de>
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<a2df2105-31b8-425c-a963-4ea98e2f2ffa AT f-us DOT de>
	<e10d1c13-b167-46b1-935d-edebcf307e9a AT gmx DOT net>
	<439a4aeb-e8f8-42c7-6c35-c303a9366368 AT cs DOT umass DOT edu>
	<b6f5af93-a7c1-428a-b6d3-5a9baaea3608 AT SystematicSW DOT ab DOT ca>
	<14be4d61-0c8b-412d-9afe-c60f2e4b3b42 AT gmx DOT net>
	<1587827336 DOT 3670099 DOT 1707332493600 AT mail DOT yahoo DOT com>
MIME-Version:	1.0
In-Reply-To:	<1587827336.3670099.1707332493600@mail.yahoo.com>
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.30
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Corinna Vinschen via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	cygwin AT cygwin DOT com
Cc:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
Errors-To:	cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 417JQaIY013269

On Feb  7 19:01, matthew patton via Cygwin wrote:
> > The problem seems to be that OpenSSH does not even arrive at checking the home diretory> or the .ssh directory. It starts checking every directory in the path and fails already at "/cygdrive/c/Users"
> I don't think we can win an argument with Theo over how misguided and unnecessary meddling the OpenSSH code is being. Ownership that diverges from 0 (or 2, or 18) should be a mere WARNING, not an ERROR until validity checks get to the user's actual $HOME and/or  the authorized_keys directory+file. 
> /home in cygwin is just [OS drive]/cygwin64/home so that doesn't fix anything. I personally set the Cygwin FSTAB to
> C:/Users /home  none    binary  0 0
> Unfortunately I think we need an #IFDEF on safe_path() to force it back into it's lane.Anyone want to tangle with Theo?

You can switch off the extended path permission checks by
changing your /etc/sshd_config file.

See the "StrictModes" setting in `man sshd_config'


Corinna

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -