(unstable) evolinux-base > ssh.yml - Security directives for Evolinux (Debian 10 or later) failing #52

Nouveau ticket

Fermé

créé 2019-06-14 15:43:38 +02:00 par lpoujol · 3 commentaires

lpoujol a commenté

2019-06-14 15:43:38 +02:00

Propriétaire

Seems this task produce invalid sshd config

TASK [evolinux-base : Security directives for Evolinux (Debian 10 or later)] ***
fatal: [debian10]: FAILED! => {"changed": false, "failed": true, "msg": "failed to validate: rc:255 error:'Match Address' in configuration but 'addr' not in connection test specification.\r\n"}

I had not the time to investigate more. I'll dive-in later.

I've assigned myself, but anyone can help ;)

Seems this task produce invalid sshd config ``` TASK [evolinux-base : Security directives for Evolinux (Debian 10 or later)] *** fatal: [debian10]: FAILED! => {"changed": false, "failed": true, "msg": "failed to validate: rc:255 error:'Match Address' in configuration but 'addr' not in connection test specification.\r\n"} ``` I had not the time to investigate more. I'll dive-in later. I've assigned myself, but anyone can help ;)

lpoujol a ajouté ça au jalon Debian 11 (Buster) 2019-06-14 15:43:38 +02:00.

lpoujol s'est assigné ça 2019-06-14 15:43:38 +02:00.

lpoujol a ajouté le label

bug

2019-06-14 15:43:38 +02:00.

lpoujol a commenté

2019-06-14 17:35:59 +02:00

Auteur

Propriétaire

Seems to be the same issue reported here :

https://www.mail-archive.com/bugs@openbsd.org/msg10859.html

Seems to be the same issue reported here : https://www.mail-archive.com/bugs@openbsd.org/msg10859.html

lpoujol a commenté

2019-06-14 18:20:13 +02:00

Auteur

Propriétaire

Ahem...

We should use -t instead of -T for config test.

It's seems the behaviour of -T is now more strict. And Match condition validation will expect a context with the -C argument.

Ahem... We should use `-t` instead of `-T` for config test. It's seems the behaviour of `-T` is now more strict. And Match condition validation will expect a context with the `-C` argument.

lpoujol a référencé ce ticket depuis une révision

2019-06-17 09:47:39 +02:00

evolinux-base: Validate sshd config with "sshd -t" See #52 - It seems the behaviour changed with the recent releases, -T that does an extended test now fails on "Match" blocks when no context is given through -C

lpoujol a commenté

2019-06-17 09:48:00 +02:00

Auteur

Propriétaire

Fixed in unstable :)

lpoujol a fermé ce ticket

2019-06-17 09:48:00 +02:00

lpoujol a référencé ce ticket depuis une révision

2019-06-17 10:25:50 +02:00