Ubuntu
phablet-tools package

phablet-shell leaves wide open sshd running after disconnect

Bug #1337289 reported by Oliver Grawert
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
phablet-tools (Ubuntu)
Fix Released
High
Robert Bruce Park

Bug Description

exiting a phablet-shell session results in an sshd running on wlan0 to which you can connect over the network.

to avoid logins via the network at all this specific sshd instance should not be started via the ssh upstart job but with dedicated options by the script itself so that it only listens to a local port on the loopback device (perhaps via a specific upstart job we ship)

Related branches

lp:~robru/phablet-tools/more-secure-shell
Rejected for merging into lp:phablet-tools
PS Jenkins bot: Needs Fixing (continuous-integration)
Oliver Grawert: Pending requested
Ubuntu Phablet Team: Pending requested
Diff: 34 lines (+10/-2)
1 file modified
phablet-shell (+10/-2)
lp:ubuntu/utopic-proposed/phablet-tools
Oliver Grawert (ogra)
Changed in phablet-tools (Ubuntu):
assignee: nobody → Robert Bruce Park (robru)
importance: Undecided → High
Revision history for this message
Robert Bruce Park (robru) wrote :

I thought the plan was to disable password logins in sshd?

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package phablet-tools - 1.1+14.10.20140918-0ubuntu1

---------------
phablet-tools (1.1+14.10.20140918-0ubuntu1) utopic; urgency=low

  [ Oliver Grawert ]
  * 'phablet-shell: only start/stop ssh if it is not already running, do
    not wipe authorized_keys (breaks the SDK) and instead only append
    the key if it is not there yet. make sure ~/.ssh exists before
    trying to do anything with it (LP: #1355286) (LP: #1337289) (LP:
    #1326805) (LP: #1337289, #1326805, #1355286)

  [ nskaggs ]
  * Make phablet-test-run use only python3 and the autopilot3 binary.
    Fixes bug 1321463 and bug 1364369 (LP: #1364369, #1321463)
 -- Ubuntu daily release <email address hidden> Thu, 18 Sep 2014 11:52:02 +0000

Changed in phablet-tools (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.