Saturday, January 17, 2026

Re: pledge(2) prevents retrieving got repository using anonymous account ?

On 2026-01-17, Sylvain Saboua <sylvain@saboua.me> wrote:
> I get the following in /var/log/authlog on my server:
> Jan 17 02:17:16 lap sshd-session[82216]: Accepted none for anonymous
> from 10.0.0.21 port 57399 ssh2
> Jan 17 02:17:16 lap sshd-session[75831]: fatal: bad ownership or modes
> for chroot directory "/home/git"
>
> Yet :
>
> $ ls -ld /home/git
> drwxr-x--- 6 _gotd _gotd 512 Jan 16 23:41 /home/git/

the ChrootDirectory path must be owned by root, sshd will then
change to $ChrootDirectory/$homedir. see the first parsgraph of
sshd_config(5)'s description of ChrootDirectory.

No comments:

Post a Comment