From patchwork Tue Oct 9 04:30:09 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 1954 Return-Path: Received: from mail01.ipfire.org (mail01.ipfire.org [IPv6:2001:470:7183:25::1]) by web02.i.ipfire.org (Postfix) with ESMTP id 77F4360721 for ; Mon, 8 Oct 2018 19:30:20 +0200 (CEST) Received: from mail01.i.ipfire.org (localhost [IPv6:::1]) by mail01.ipfire.org (Postfix) with ESMTP id CFA902068123; Mon, 8 Oct 2018 18:30:19 +0100 (BST) Received: from mx-nbg.link38.eu (mx-nbg.link38.eu [IPv6:2a03:4000:6:432c:1f9e:48:ac3:199]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx-nbg.link38.eu", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id C48512068120 for ; Mon, 8 Oct 2018 18:30:16 +0100 (BST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=link38.eu; s=201803; t=1539019812; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:in-reply-to: references; bh=w1+cMlI33RzFXsZQOLK9yGOlXYhbGdikI8YVxiFQiW8=; b=Wl/VMAzn4GINccXBiYu0uNUMjCyEjdvAfu8zqEXiKrdBnSzE2nesATAa3qpNARu2liV56p +XIwEI+3OqQ6OG5N7E3cGO+6Q92tjZd6uaBuvq6W++z6NB9iiCVR0o/L6FK43hcnpS/0jA w8Ja4QUFGqSQovMzQrDNH5TkvvWz4+JoDNlc9X1J4moTQWGx5VYaPfubNse5sypFVnHSBE 03+Vmt+S100G/mHP62sNioBoHx0yImw6u7cTwr/vZ0SY0V8jPiGKPNa7QoXYE25AuqMxB/ P3MkRY6UZZRusv1aMQ7lGqdSv8Q4o6xrYYCCtP95J1GABKY+RTdj+5IgPzxF5A== From: =?utf-8?q?Peter_M=C3=BCller?= To: development@lists.ipfire.org Subject: [PATCH v2] fix broken SFTP in OpenSSH server Date: Mon, 8 Oct 2018 19:30:09 +0200 Message-Id: <20181008173009.3795-1-peter.mueller@link38.eu> MIME-Version: 1.0 Authentication-Results: mail01.ipfire.org; dkim=pass header.d=link38.eu; dmarc=pass (policy=none) header.from=link38.eu; spf=pass smtp.mailfrom=peter.mueller@link38.eu X-Spamd-Result: default: False [-7.84 / 11.00]; ARC_NA(0.00)[]; R_DKIM_ALLOW(0.00)[link38.eu]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a03:4000:6:432c:1f9e:48:ac3:199]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; RCVD_DKIM_ARC_DNSWL_MED(-1.50)[]; RCPT_COUNT_ONE(0.00)[1]; MX_GOOD(-0.01)[cached: mx-nbg.link38.eu]; DKIM_TRACE(0.00)[link38.eu:+]; MID_CONTAINS_FROM(1.00)[]; RCVD_IN_DNSWL_MED(0.00)[9.9.1.0.3.c.a.0.8.4.0.0.e.9.f.1.c.2.3.4.6.0.0.0.0.0.0.4.3.0.a.2.list.dnswl.org : 127.0.6.2]; DMARC_POLICY_ALLOW(-0.25)[link38.eu,none]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; IP_SCORE(-3.78)[ip: (-9.91), ipnet: 2a03:4000::/32(-4.95), asn: 197540(-3.96), country: DE(-0.09)]; ASN(0.00)[asn:197540, ipnet:2a03:4000::/32, country:DE]; RCVD_TLS_ALL(0.00)[]; BAYES_HAM(-3.00)[100.00%] X-Spam-Status: No, score=-7.84 X-Rspamd-Server: mail01.i.ipfire.org X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" Fixes #11887 The second version of this patch uses the correct path on IPFire systems and supersedes the first one. It also referrs to the correct issue ID. Thanks to Matthias Fischer for reporting this. Signed-off-by: Peter Müller --- config/ssh/sshd_config | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/ssh/sshd_config b/config/ssh/sshd_config index 60bb0a9e6..a248c4906 100644 --- a/config/ssh/sshd_config +++ b/config/ssh/sshd_config @@ -75,4 +75,7 @@ ClientAliveInterval 10 # close unresponsive SSH sessions which fail to answer keep-alive ClientAliveCountMax 6 +# add support for SFTP +Subsystem sftp /usr/lib/openssh/sftp-server + # EOF