Bug 797384

Summary: Init scripts tries to read missing file
Product: Red Hat Enterprise Linux 6 Reporter: Steve Snyder <swsnyder>
Component: opensshAssignee: Petr Lautrbach <plautrba>
Status: CLOSED ERRATA QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: medium    
Version: 6.2CC: dapospis, frank.arnold, mvadkert, pvrabec
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: openssh-5.3p1-73.el6 Doc Type: Bug Fix
Doc Text:
No Documentation needed
 Story Points: ---
Clone Of: Environment:
Last Closed: 2012-06-20 07:17:28 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
fixed sshd init script none

Description Steve Snyder 2012-02-25 12:59:52 UTC 
Description of problem:

The sshd init script attempts to read from missing file /proc/sys/crypto/fips_enabled/

Version-Release number of selected component (if applicable):

# rpm -q openssh-server
openssh-server-5.3p1-70.el6_2.2.x86_64

How reproducible:

Always

Steps to Reproduce:
1. # service sshd restart
2.
3.
  
Actual results:

# service sshd restart
Stopping sshd:
cat: /proc/sys/crypto/fips_enabled: No such file or directory
/etc/init.d/sshd: line 50: [: too many arguments
Starting sshd:


Expected results:

Should test for existence of file before attempting to read it.

Additional info:

Seen with a fully-updated RHEL 6.2/x86_64 installation in an OpenVZ container.  OpenVZ kernel: 2.6.18-274.7.1.el5.028stab095.1

# ll /proc/sys/crypto/
ls: cannot access /proc/sys/crypto/: No such file or directory

# ll /proc/sys/
total 0
dr-xr-xr-x 2 root root 0 Feb 25 14:58 debug
dr-xr-xr-x 2 root root 0 Feb 25 14:58 dev
dr-xr-xr-x 5 root root 0 Feb 24 15:47 fs
dr-xr-xr-x 4 root root 0 Feb 25 14:58 kernel
dr-xr-xr-x 7 root root 0 Feb 25 14:58 net
dr-xr-xr-x 2 root root 0 Feb 25 14:58 vm
Comment 2 Petr Lautrbach 2012-02-27 20:15:16 UTC 
Created attachment 566133 [details]
fixed sshd init script
Comment 5 Petr Lautrbach 2012-03-08 09:45:01 UTC 
*** Bug 801100 has been marked as a duplicate of this bug. ***
Comment 7 Petr Lautrbach 2012-04-27 13:12:40 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
No Documentation needed
Comment 8 errata-xmlrpc 2012-06-20 07:17:28 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2012-0884.html