X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
Date: Tue, 24 Apr 2012 09:27:36 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: SSHD /var/empty must be owned by root
Message-ID: <20120424072736.GB17620@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <CA+zRRSqucL-pFEVYGj+86i_6c1-yF=ZK_KkROwKdsi-LxeoEPA AT mail DOT gmail DOT com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <CA+zRRSqucL-pFEVYGj+86i_6c1-yF=ZK_KkROwKdsi-LxeoEPA@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On Apr 24 09:10, Gyurmo wrote:
> Hello,
> I have:
> 
> [code]
> $ /usr/sbin/sshd.exe -D
> /var/empty must be owned by root and not group or world-writable.

Why don't you run sshd as a service?  That's what the ssh-host-config
script is for.  The above call from the command line does not allow to
login with another account than the one sshd has been started under.

Usually sshd tests if /var/empty is owned by uid 0.  On Cygwin, where
there's usually no user with uid 0, the code has been modified to test
if /var/empty is owned by the user running sshd.  So, if you start sshd
on the command line, you have to chown /var/empty to the current user
account.  Same goes for the ssh-related files under /etc.  The error
message is the vanilla upstream error message.  It hasn't been changed
for Cygwin to keep the Cygwin-related upstream patchset small.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple