Bug 119263

Summary:	sshd logs message containing garbage
Product:	[Fedora] Fedora	Reporter:	Alexandre Oliva <oliva>
Component:	openssh	Assignee:	Tomas Mraz <tmraz>
Status:	CLOSED WORKSFORME	QA Contact:	Brian Brock <bbrock>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rawhide	CC:	alan, wtogami
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-01-26 15:56:55 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	114961, 123268, 136451

Description Alexandre Oliva 2004-03-28 00:44:52 UTC

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040312

Description of problem:
When I ssh into a box as a user whose home dir is not labeled as such
(or something like that), openssh logs a message like this to
/var/log/messages:

Warning!  Could not relabel [garbage] with
system_u:object_r:sshd_devpts_t, not relabeling.

Sometimes [garbage] is just an empty string; sometimes it's actual
garbage.  Scary!

I can't tell for sure whether this has to do with the directory
labeling or with logging as a user other than root (it seems to never
happen for root, and always when logging in as myself, and my home dir
is not in /home so it's not labeled properly).

Oh, SELinux is enabled, but in permissive mode.

Version-Release number of selected component (if applicable):
openssh-3.6.1p2-34

How reproducible:
Always

Steps to Reproduce:
1.ssh into a box (localhost, for example) as a non-root user (that has
a homedir that's not labeled as such)
2.check the last few lines of /var/log/messages

Actual Results:  The warning above, with garbage instead of the pathname

Expected Results:  The pathname instead of garbage

Additional info:

I'm not sure this is a security issue, but I'm making it as such just
in case.  Garbage in such applications always gets me worried.

Comment 1 Alan Cox 2004-06-15 13:59:53 UTC

This isnt in 3.8.1

I've inspected the 3.8.1 SELinux changes and the all appear correct
and in order. Can you duplicate this with FC2, or close it ?

Comment 2 Tomas Mraz 2005-01-26 15:56:55 UTC

No response - closing, please reopen if still appears.