[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#305531: marked as done (Old ssh package upgrade don't update file /etc/hosts.deny)



Your message dated Wed, 20 Apr 2005 17:10:49 +0100
with message-id <20050420161049.GC397@riva.ucam.org>
and subject line Bug#305531: Old ssh package upgrade don't update file /etc/hosts.deny
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 20 Apr 2005 15:21:06 +0000
>From alex@arcalpin.com Wed Apr 20 08:21:06 2005
Return-path: <alex@arcalpin.com>
Received: from aannecy-152-1-16-187.w83-197.abo.wanadoo.fr (lechatel) [83.197.167.187] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DOH0j-0004RK-00; Wed, 20 Apr 2005 08:21:06 -0700
Received: from root by lechatel with local (Exim 4.34)
	id 1DOGrj-0004IO-0h; Wed, 20 Apr 2005 17:11:47 +0200
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Modesto Alexandre <alex@arcalpin.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Old ssh package upgrade don't update file /etc/hosts.deny
X-Mailer: reportbug 3.9
Date: Wed, 20 Apr 2005 17:11:46 +0200
Message-Id: <[🔎] E1DOGrj-0004IO-0h@lechatel>
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: ssh
Version: 1:3.8.1p1-8.sarge.4
Severity: normal


I have an old ssh package (into knoppix) i've upgrade ssh package..
 because i have an problem to connect..

 new package ssh don't "uncomment" line into /etc/hosts.deny

 References :
 'ALL: PARANOID' is the only thing /etc/hosts.deny 
 http://lists.debian.org/debian-devel/2001/04/msg01414.html


 Alex.
 

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11-1-686
Locale: LANG=fr_FR@euro, LC_CTYPE=fr_FR@euro (charmap=ISO-8859-15)

Versions of packages ssh depends on:
ii  adduser                     3.59         Add and remove users and groups
ii  debconf                     1.4.30       Debian configuration management sy
ii  dpkg                        1.10.23      Package maintenance system for Deb
ii  libc6                       2.3.2.ds1-10 GNU C Library: Shared libraries an
ii  libpam-modules              0.76-22      Pluggable Authentication Modules f
ii  libpam-runtime              0.76-22      Runtime support for the PAM librar
ii  libpam0g                    0.76-22      Pluggable Authentication Modules l
ii  libssl0.9.7                 0.9.7d-5     SSL shared libraries
ii  libwrap0                    7.6.dbs-5    Wietse Venema's TCP wrappers libra
ii  zlib1g                      1:1.2.1.1-5  compression library - runtime

-- debconf information:
  ssh/insecure_rshd:
  ssh/privsep_ask: true
* ssh/user_environment_tell:
* ssh/forward_warning:
* ssh/insecure_telnetd:
  ssh/new_config: true
* ssh/use_old_init_script: true
  ssh/rootlogin_warning:
* ssh/upgrade_to_openssh: true
* ssh/SUID_client: true
  ssh/disable_cr_auth: false
* ssh/protocol2_default:
* ssh/privsep_tell:
* ssh/ssh2_keys_merged:
  ssh/ancient_version:
  ssh/protocol2_only: true
  ssh/encrypted_host_key_but_no_keygen:
* ssh/run_sshd: true

---------------------------------------
Received: (at 305531-done) by bugs.debian.org; 20 Apr 2005 16:10:55 +0000
>From cjwatson@flatline.org.uk Wed Apr 20 09:10:55 2005
Return-path: <cjwatson@flatline.org.uk>
Received: from chiark.greenend.org.uk [193.201.200.170] (mail)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DOHmx-0004NK-00; Wed, 20 Apr 2005 09:10:55 -0700
Received: from [192.168.124.112] (helo=riva.lab.dotat.at)
	by chiark.greenend.org.uk (Debian Exim 3.35 #1) with esmtp
	(return-path cjwatson@flatline.org.uk)
	id 1DOHmv-0006gp-00
	for 305531-done@bugs.debian.org; Wed, 20 Apr 2005 17:10:53 +0100
Received: from cjwatson by riva.lab.dotat.at with local (Exim 3.35 #1 (Debian))
	for 305531-done@bugs.debian.org
	id 1DOHmr-0000LT-00; Wed, 20 Apr 2005 17:10:49 +0100
Date: Wed, 20 Apr 2005 17:10:49 +0100
From: Colin Watson <cjwatson@debian.org>
To: 305531-done@bugs.debian.org
Subject: Re: Bug#305531: Old ssh package upgrade don't update file /etc/hosts.deny
Message-ID: <20050420161049.GC397@riva.ucam.org>
References: <[🔎] E1DOGrj-0004IO-0h@lechatel>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[🔎] E1DOGrj-0004IO-0h@lechatel>
User-Agent: Mutt/1.3.28i
Delivered-To: 305531-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

On Wed, Apr 20, 2005 at 05:11:46PM +0200, Modesto Alexandre wrote:
> Package: ssh
> Version: 1:3.8.1p1-8.sarge.4
> Severity: normal
> 
> 
> I have an old ssh package (into knoppix) i've upgrade ssh package..
>  because i have an problem to connect..
> 
>  new package ssh don't "uncomment" line into /etc/hosts.deny

That file is not controlled by ssh, but by tcpd. ssh will absolutely not
change that file, since it does not own it.

I believe that tcpd intentionally avoids changing existing
/etc/hosts.deny files because it's too hard to tell the difference
between a default installation and something that the administrator
intended. It's easy to change yourself.

Cheers,

-- 
Colin Watson                                       [cjwatson@debian.org]



Reply to: