X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 6E1B03858438
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1707333995;
	bh=gtt/Ce8lRjN3dsaQHQ790XB0iUQkScpiAK2bihW9Doo=;
	h=Date:To:Subject:References:In-Reply-To:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:
	 From;
	b=uSjWRNbXGpPL2DBJvLarhI4moNOR2+WVVYveR1dBcoNw/IYLM/mDAb7X5ahpBhCO7
	 b3nBtJTbCEIWl8XCjWQynZ/DqBy0FmfkIufp2J53dG8gmoVZeZ0gjtibDFKjLyQor+
	 TvePvAeUnGJ/QJkqiEvN9thm4SVaQo80c7phdrTs=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org BC0F43858C29
Date: Wed, 7 Feb 2024 20:25:25 +0100
To: cygwin AT cygwin DOT com
Subject: Re: cygsshd fails due to bad ownership or modes of /cygdrive/c/Users
Message-ID: <ZcPZJbmzsawUQAMl@calimero.vinschen.de>
Mail-Followup-To: cygwin AT cygwin DOT com
References: <a2df2105-31b8-425c-a963-4ea98e2f2ffa AT f-us DOT de>
 <e10d1c13-b167-46b1-935d-edebcf307e9a AT gmx DOT net>
 <439a4aeb-e8f8-42c7-6c35-c303a9366368 AT cs DOT umass DOT edu>
 <b6f5af93-a7c1-428a-b6d3-5a9baaea3608 AT SystematicSW DOT ab DOT ca>
 <14be4d61-0c8b-412d-9afe-c60f2e4b3b42 AT gmx DOT net>
 <1587827336 DOT 3670099 DOT 1707332493600 AT mail DOT yahoo DOT com>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <1587827336.3670099.1707332493600@mail.yahoo.com>
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Corinna Vinschen via Cygwin <cygwin AT cygwin DOT com>
Reply-To: cygwin AT cygwin DOT com
Cc: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
Content-Type: text/plain; charset="utf-8"
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 417JQaIY013269

On Feb  7 19:01, matthew patton via Cygwin wrote:
> > The problem seems to be that OpenSSH does not even arrive at checking the home diretory> or the .ssh directory. It starts checking every directory in the path and fails already at "/cygdrive/c/Users"
> I don't think we can win an argument with Theo over how misguided and unnecessary meddling the OpenSSH code is being. Ownership that diverges from 0 (or 2, or 18) should be a mere WARNING, not an ERROR until validity checks get to the user's actual $HOME and/or  the authorized_keys directory+file. 
> /home in cygwin is just [OS drive]/cygwin64/home so that doesn't fix anything. I personally set the Cygwin FSTAB to
> C:/Users /home  none    binary  0 0
> Unfortunately I think we need an #IFDEF on safe_path() to force it back into it's lane.Anyone want to tangle with Theo?

You can switch off the extended path permission checks by
changing your /etc/sshd_config file.

See the "StrictModes" setting in `man sshd_config'


Corinna

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple