Package: dropbear
Version: 0.52-1
Severity: normal
Tags: patch

Since x11-common 1:7.4+2, the /usr/X11R6/bin symbolic link is no more
shipped with x11-common and therefore /usr/X11R6 is more present in
most Sid installations. And according to the FHS no software should
rely on the existence of /usr/X11R6: "In general, software must not
be installed or managed via the above symbolic links."[1]

  [1] 
http://www.debian.org/doc/packaging-manuals/fhs/fhs-2.3.html#USRX11R6XWINDOWSYSTEMVERSION11REL)

This breaks X forwarding to Sid machines running dropbear as SSH
server, because the xauth location is hardcoded as to be at
/usr/X11R6/bin/xauth in dropbear's options.h.

The CHANGES file says something about compatibility issues with MacOS
X and I can confirm that at least on MacOS X 10.4, xauth seems only to
exist on that location. But since the dbclient doesn't seem to support
X forwarding (at least not according to dbclient(1)), I suggest to
adjust the xauth path in options.h since it should not affect the
dropbear SSH client.

The following patch (e.g. saved as
dropbear-0.52/debian/diff/0003-options.h-fix-xauth-path.diff) fixes
this:

--- dropbear-0.52.orig/options.h        2008-11-11 15:13:50.000000000 +0100
+++ dropbear-0.52/options.h     2009-06-12 17:32:22.000000000 +0200
@@ -220,7 +220,7 @@
 /* The command to invoke for xauth when using X11 forwarding.
  * "-q" for quiet */
 #ifndef XAUTH_COMMAND
-#define XAUTH_COMMAND "/usr/X11R6/bin/xauth -q"
+#define XAUTH_COMMAND "/usr/bin/xauth -q"
 #endif
 
 /* if you want to enable running an sftp server (such as the one included with

Works fine here. :-)

JFTR: Setting XAuthLocation to /usr/bin/xauth on a connecting OpenSSH
client doesn't help. (ssh_config(5) doesn't tell if the setting
affects the local or remote path, so I'm not sure if it could have
helped anyway.)

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (600, 'stable'), (400, 'oldstable'), (110, 
'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.29-2-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages dropbear depends on:
ii  libc6                  2.9-13            GNU C Library: Shared libraries
ii  zlib1g                 1:1.2.3.3.dfsg-13 compression library - runtime

dropbear recommends no packages.

Versions of packages dropbear suggests:
ii  openssh-client                1:5.1p1-6  secure shell client, an rlogin/rsh
pn  runit                         <none>     (no description available)
ii  udev                          0.141-1    /dev/ and hotplug management daemo

-- no debconf information



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to