Bug#1044936: dropbear: Fails to build source after successful build

2023-08-13 Thread Matt Johnston
On 2023-08-14 12:56 am, Lucas Nussbaum wrote: This package fails to build a source package after a successful build (dpkg-buildpackage ; dpkg-buildpackage -S). dh clean dh_auto_clean make -j8 distclean make[1]: Entering directory '/<>' dpkg-source: info: local changes

Bug#962132: dropbear-initramfs should be Suggests not Recommends

2020-06-03 Thread Matt Johnston
Package: dropbear Version: 2019.78-2 Severity: normal The dropbear package currently has Recommends: dropbear-initramfs so installing dropbear pulls in 30MB of other initramfs-related packages not needed for a container. "Suggests" would seem more appropriate going by the policy manual "The

Bug#903403: dropbear's default PATH should be different for the root user

2018-07-09 Thread Matt Johnston
Hi Raphael, > When you say "upstream" here, you refer to login or dropbear? > You are explaining that the distinction in the PATH set for root and > non-root already exists in login... so you agree that a similar change > ought to be done in dropbear, is that correct ? Dropbear "upstream" will

Bug#903403: dropbear's default PATH should be different for the root user

2018-07-09 Thread Matt Johnston
> When dropbear is used in a very restricted environment (such as in a > initrd), the default user shell is often also very restricted > and doesn't take care of setting the PATH so the user ends up > with the PATH set by dropbear. Unfortunately, dropbear always > sets "/usr/bin:/bin" as default

Bug#801331: malformed output

2016-02-19 Thread Matt Johnston
The attached patch from https://github.com/apavel/jdresolve/commit/71b9c86429c815933f42a2921dc9fbbe29c014fc works for me and looks OK. Can it be applied? Thanks, Matt jdresolve-update.diff Description: Binary data

Bug#727214: dropbear: v. 2013.60 is released, NESSUS reports earlier versions insecure

2013-10-23 Thread Matt Johnston
Try version 2012.55-1.4. Cheers, Matt On Wed, Oct 23, 2013 at 03:40:54PM +0200, billw...@england.edu wrote: Package: dropbear Version: 2012.55-1.3 Severity: important Dear Maintainer, *** Please consider answering these questions, where appropriate *** * What led up to the

Bug#692932: dropbear: Allow to disable dropbear in initramfs

2012-11-10 Thread Matt Johnston
Hi, As Dropbear upstream I'm keen to see this fixed. Given how many Debian Dropbear bugs are in the initramfs portion, perhaps the initramfs setup of Dropbear should go into its own package for people who want it? Cheers, Matt On Sun, Nov 11, 2012 at 02:18:17AM +0100, Lars Wilke wrote:

Bug#555889: Null password also disallows key-based logins.

2011-11-09 Thread Matt Johnston
This is fixed in the latest upstream release 2011.54 Matt -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#636696: dropbear: Does not listen on IPv6 addresses

2011-11-09 Thread Matt Johnston
This is fixed in the latest Dropbear release 2011.54 Matt -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#636696: dropbear: Does not listen on IPv6 addresses

2011-10-26 Thread Matt Johnston
The next release of Dropbear will set bindv6only on listening sockets by default. Matt -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#636696: dropbear: Does not listen on IPv6 addresses

2011-08-05 Thread Matt Johnston
I think I had to add the sysctl net.ipv6.bindv6only=1 to get Dropbear to listen on ipv6 on Debian. Dropbear just iterates over all available addresses, I don't _think_ it's a bug in Dropbear itself. Matt Dropbear developer On Fri, Aug 05, 2011 at 09:49:41PM +1000, Chris Deigan wrote: Package:

Bug#545242: dropbear: Please patch sources not to use /etc/dropbear/{log,run}

2009-09-06 Thread Matt Johnston
These files are not from upstream, they're part of the Debian runit configuration (which is optional, off by default). They are not log files (well, one is a symlink to /var/log/dropbear) or runtime status files, but rather config files for Dropbear. I see no problem with readonly

Bug#545242: dropbear: Please patch sources not to use /etc/dropbear/{log,run}

2009-09-06 Thread Matt Johnston
On Sun, Sep 06, 2009 at 07:18:16PM +0300, Jari Aalto wrote: FHS: http://www.pathname.com/fhs/pub/fhs-2.3.html#ETCHOSTSPECIFICSYSTEMCONFIGURATION The /etc hierarchy contains configuration files. A configuration file is a local file used to control the operation of a program; it

Bug#544527: not getting enough entropy (?) makes dropbear block at startup (before going into background)

2009-09-01 Thread Matt Johnston
Dropbear 0.52 should be using /dev/urandom, which AFAIK won't block? Unless the behaviour of recent kernels has changed... If Dropbear is blocking on the random device it should log something - could you check the auth logs? Matt On Tue, Sep 01, 2009 at 11:42:14AM +0200, deb...@x.ray.net

Bug#495825: dropbear: don't specify how to use configure compression levels

2008-09-23 Thread Matt Johnston
On Wed, Aug 20, 2008 at 07:43:58PM +0200, Luca Capello wrote: Package: dropbear Version: 0.51-1 Severity: normal Hello, according to [1], dbclient supports compression since version 0.47, but I cannot find any reference of it in the manpage nor in the various READMEs provided in the

Bug#472483: dropbear: scp causes non-zero return code

2008-03-26 Thread Matt Johnston
On Wed, Mar 26, 2008 at 05:25:12PM +, Gerrit Pape wrote: On Mon, Mar 24, 2008 at 05:13:58PM +0200, Jari Aalto wrote: TEST SETUP: 1) run dropbear from xinetd at host A: /etc/xinetd.d/dropbear 2) try to upload anything from host B to host A (above), using openssh scp: Hi Jari,

Bug#465903: cryptroot remote unlocking on boot feature

2008-02-16 Thread Matt Johnston
I don't think Recommends is appropriate for the general case - it's meant for packages used in all but unusual installations (from the policy manual) isn't it? The key generation should be able to be performed using dropbearkey (and /usr/lib/dropbear/dropbearconvert if required), without needing

Bug#448397: openssh - dropbear incompatability, nonzero exit status returned from successful commands

2007-10-31 Thread Matt Johnston
I've had a few reports of this but can't reproduce it, which is awkward for debugging. Is there anything of note about the OS or hardware that might help? Dropbear is actually returning no exit status packet at all, and the ssh client itself sets 255 (AFAICT). A successful run is below

Bug#445354: dropbear: has malloc'd too much memory (2.5Gv/1.6Gr)

2007-10-16 Thread Matt Johnston
Is there anything in /var/log/auth ? That's where logging should end up. Matt -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#394996: fixed in 0.49

2007-02-25 Thread Matt Johnston
Hi. Dropbear 0.49 (released 23 Feb 07) fixes this issue. Cheers, Matt Johnston Dropbear developer -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#237814: libpam-opie no_fake_prompt patch

2007-02-25 Thread Matt Johnston
Hi. I can confirm that Samoied's patch works for our purpose. We have various user accounts on a shell machine, and most users don't care about OTP auth. To avoid confusion upon mistyped passwords it's preferable to present non-OTP users with another plain pam_unix password prompt, rather than

Bug#357323: dropbear doesn't work on amd64

2006-03-21 Thread Matt Johnston
. Might be worth trying 0.48 with the sarge build environment? Matt Johnston Dropbear developer -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#351036: libc6 should restart Dropbear sshd (or provide a generic mechanism for other packages)

2006-02-02 Thread Matt Johnston
Package: libc6 Version: 2.3.5-8.1 Severity: normal libc6 has a hardcoded list of processes (mostly servers) to restart in its postinst script. Some important services (in this case Dropbear ssh daemon) are not restarted, which can render a system unusable without a reboot. dropbear should be

Bug#309523: dropbear: [manual] Please list command line options in alphabetical order

2005-05-23 Thread Matt Johnston
On Mon, May 23, 2005 at 08:52:28AM +, Gerrit Pape wrote: Hi Jari, on followup please respect Reply-To:. On Sun, May 22, 2005 at 10:06:26AM +0300, Jari Aalto wrote: | On Tue, May 17, 2005 at 09:33:43PM +0300, Jari Aalto wrote: | It would be better if dropbear(1) manual page followed

Bug#300823: libpam-modules: pam_mail module prevents login with blocked NFS

2005-03-28 Thread Matt Johnston
On Mon, Mar 28, 2005 at 06:30:28PM -0500, Sam Hartman wrote: Steve == Steve Langasek [EMAIL PROTECTED] writes: Steve It seems to me that it would be better to fix this in the Steve mount options for the NFS mount in question... Hmm. Actually, will a signal even interrupt an NFS

Bug#300823: libpam-modules: pam_mail module prevents login with blocked NFS

2005-03-21 Thread Matt Johnston
Package: libpam-modules Version: 0.76-22 Severity: normal The pam_mail module attempts to perform stat() of the mail location. If the mail location is NFS mounted and that server is unavailable, logins as any user (root included) will hang indefinitely (hampering attempts to umount the NFS mount