Date: Wed, 7 Feb 2024 20:25:25 +0100
To: cygwin@cygwin.com
Subject: Re: cygsshd fails due to bad ownership or modes of /cygdrive/c/Users
Message-ID: <ZcPZJbmzsawUQAMl@calimero.vinschen.de>
Mail-Followup-To: cygwin@cygwin.com
References: <a2df2105-31b8-425c-a963-4ea98e2f2ffa@f-us.de>
 <e10d1c13-b167-46b1-935d-edebcf307e9a@gmx.net>
 <439a4aeb-e8f8-42c7-6c35-c303a9366368@cs.umass.edu>
 <b6f5af93-a7c1-428a-b6d3-5a9baaea3608@SystematicSW.ab.ca>
 <14be4d61-0c8b-412d-9afe-c60f2e4b3b42@gmx.net>
 <1587827336.3670099.1707332493600@mail.yahoo.com>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <1587827336.3670099.1707332493600@mail.yahoo.com>
Precedence: list
From: Corinna Vinschen via Cygwin <cygwin@cygwin.com>
Reply-To: cygwin@cygwin.com
Cc: Corinna Vinschen <corinna-cygwin@cygwin.com>
Content-Type: text/plain; charset="utf-8"
Errors-To: cygwin-bounces+archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie.com@cygwin.com>
Content-Transfer-Encoding: 8bit

On Feb  7 19:01, matthew patton via Cygwin wrote:
> > The problem seems to be that OpenSSH does not even arrive at checking the home diretory> or the .ssh directory. It starts checking every directory in the path and fails already at "/cygdrive/c/Users"
> I don't think we can win an argument with Theo over how misguided and unnecessary meddling the OpenSSH code is being. Ownership that diverges from 0 (or 2, or 18) should be a mere WARNING, not an ERROR until validity checks get to the user's actual $HOME and/or  the authorized_keys directory+file. 
> /home in cygwin is just [OS drive]/cygwin64/home so that doesn't fix anything. I personally set the Cygwin FSTAB to
> C:/Users /home  none    binary  0 0
> Unfortunately I think we need an #IFDEF on safe_path() to force it back into it's lane.Anyone want to tangle with Theo?

You can switch off the extended path permission checks by
changing your /etc/sshd_config file.

See the "StrictModes" setting in `man sshd_config'


Corinna

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple