DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 48F043858C29
Date: Wed, 7 Feb 2024 19:01:33 +0000 (UTC)
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>,
        Frank-Ulrich Sommer <f-u DOT s AT gmx DOT net>
Message-ID: <1587827336.3670099.1707332493600@mail.yahoo.com>
In-Reply-To: <14be4d61-0c8b-412d-9afe-c60f2e4b3b42@gmx.net>
References: <a2df2105-31b8-425c-a963-4ea98e2f2ffa AT f-us DOT de>
 <e10d1c13-b167-46b1-935d-edebcf307e9a AT gmx DOT net>
 <439a4aeb-e8f8-42c7-6c35-c303a9366368 AT cs DOT umass DOT edu>
 <b6f5af93-a7c1-428a-b6d3-5a9baaea3608 AT SystematicSW DOT ab DOT ca>
 <14be4d61-0c8b-412d-9afe-c60f2e4b3b42 AT gmx DOT net>
Subject: Re: cygsshd fails due to bad ownership or modes of /cygdrive/c/Users
MIME-Version: 1.0
Precedence: list
From: matthew patton via Cygwin <cygwin AT cygwin DOT com>
Reply-To: matthew patton <pattonme AT yahoo DOT com>
Content-Type: text/plain; charset="utf-8"
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>
Content-Transfer-Encoding: 8bit

> The problem seems to be that OpenSSH does not even arrive at checking the home diretory> or the .ssh directory. It starts checking every directory in the path and fails already at "/cygdrive/c/Users"
I don't think we can win an argument with Theo over how misguided and unnecessary meddling the OpenSSH code is being. Ownership that diverges from 0 (or 2, or 18) should be a mere WARNING, not an ERROR until validity checks get to the user's actual $HOME and/or  the authorized_keys directory+file. 
/home in cygwin is just [OS drive]/cygwin64/home so that doesn't fix anything. I personally set the Cygwin FSTAB to
C:/Users /home  none    binary  0 0
Unfortunately I think we need an #IFDEF on safe_path() to force it back into it's lane.Anyone want to tangle with Theo?

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple