Bug 754573

Summary: TCP Wrapper doesn't work
Product: [Fedora] Fedora Reporter: Łukasz Trąbiński <lukasz>
Component: tcp_wrappersAssignee: Petr Lautrbach <plautrba>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 16CC: ovasik, pknirsch, rvokal
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-12-29 09:45:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Łukasz Trąbiński 2011-11-16 21:29:27 UTC
Description of problem:

TCP Wrapper doesn't work basic on files: /etc/hosts.allow and /etc/hosts.deny 

Version-Release number of selected component (if applicable):
setup-2.8.36-2.fc16.noarch




How reproducible:


Steps to Reproduce:
1. Put into /etc/hosts.deny line:
sshd: ALL

2. Try connect to host by ssh. 
  
Actual results:

Connect is possible

Expected results:

Connect should be refused


Additional info:

In FC15 and FC14 it worked

Comment 1 Ondrej Vasik 2011-11-17 06:02:00 UTC
Component setup provides just empty hosts.deny and hosts.allow - so the issue is not in the setup component -> moving to tcp_wrappers.

Comment 2 Fedora Admin XMLRPC Client 2011-11-30 12:24:24 UTC
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

Comment 3 Petr Lautrbach 2011-12-02 16:00:00 UTC
This still works for me:

[user@master ~]$ ssh root@f16-openssh
ssh_exchange_identification: Connection closed by remote host


[root@f16-openssh ~]# tail -n1 /var/log/secure
Dec  2 16:54:22 f16-openssh sshd[1437]: refused connect from 192.168.122.1 (192.168.122.1)
[root@f16-openssh ~]# ssh root@localhost
ssh_exchange_identification: Connection closed by remote host
[root@f16-openssh ~]# tail -n1 /var/log/secure
Dec  2 16:57:00 f16-openssh sshd[1442]: refused connect from ::1 (::1)
[root@f16-openssh ~]# grep sshd /etc/hosts.deny
sshd: ALL

tcp_wrappers-7.6-64.fc16.x86_64
openssh-5.8p2-23.fc16.x86_64

Please provide more relevant informations - host.deny, host.allow, sshd_config, package versions, sshd.service status ...

Comment 4 Łukasz Trąbiński 2011-12-29 09:45:52 UTC
Well, I have just checked again and now it works correctly. We can close this bug.