Hi Seyeong, Yeap, I checked the latest upstream master branch and confirmed the same behavior in auth-options.c. When untrusted=1, sshauthopt_serialise() was unconditionally serializing "true" for force_command even if the option was NULL.
I submitted the upstream pull request with the fix here: https://github.com/openssh/openssh-portable/pull/712 The PR ensures "true" and "yes" are only serialized when the corresponding field in sshauthopt is actually non-NULL. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2166842 Title: sshd: fatal "monitor_child_preauth: unexpected authentication from 102" breaks root public-key login with PermitRootLogin=forced- commands-only + UsePAM=yes (regression in 1:9.6p1-3ubuntu13.18) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2166842/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
