[Bug 1922459] Re: restricted-ssh-commands regex check is not properly escaped

2021-04-06 Thread Seth Arnold
Thanks for investigating, Miguel. ** Changed in: restricted-ssh-commands (Ubuntu) Status: Incomplete => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1922459 Title:

[Bug 1922459] Re: restricted-ssh-commands regex check is not properly escaped

2021-04-06 Thread Miguel Ángel
Hello Seth, you're completely right plus the example was flawed as it also matches a empty string. The issue seems to be particularly to the system itself, several hardware issues showed up after the report, maybe somehow that cause the false positive. I had another example which didn't use the

[Bug 1922459] Re: restricted-ssh-commands regex check is not properly escaped

2021-04-05 Thread Seth Arnold
Hello Miguel, can you give a concrete example to demonstrate the issue? The bash(1) manpage and the wolledge bash wiki give me the strong impression that the variable containing the regex should *not* be quoted:

[Bug 1922459] Re: restricted-ssh-commands regex check is not properly escaped

2021-04-05 Thread Seth Arnold
** Changed in: restricted-ssh-commands (Ubuntu) Status: New => Incomplete ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.