Description of problem: In the latest version of btrbk (0.31.3-1) the execute bits of the scripts in /usr/share/btrbk/scripts were removed as a response to a security issue. As a result of this, creating remote backups using btrbk using the advertised method of securing the remote command using ssh_filter_btrbk.sh is no longer possible. My question, how is it safer not being able to create a remote backup vs. a fixed remote execution bug? In other words, please reinstate the execute bit of this script. Version-Release number of selected component (if applicable): btrbk-0.31.3-1 How reproducible: 100% Steps to Reproduce: 1.create btrbk config, and add a command in your root's .ssh/authorized_keys file. 2.try to use btrbk to remotely copy a backup 3. Actual results: ERROR: Failed to fetch subvolume detail for '<hostname>:<directory>' ERROR: ... Command execution failed (exitcode=126) ERROR: ... sh: ssh -i /etc/btrbk/ssh/id_rsa root@<hostname> 'readlink -v -e <directory>' ERROR: ... bash: line 1: /usr/share/btrbk/scripts/ssh_filter_btrbk.sh: Permission denied Expected results: No error. Additional info: See bugs 1994988 1994989 (I can only read the public parts)
My bad, I misunderstood the other bug reports. I'll send an update ASAP.
FEDORA-2022-c844d2edcc has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2022-c844d2edcc
FEDORA-2022-cf2784607b has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2022-cf2784607b
Thanks for the quick response.
FEDORA-2022-cf2784607b has been pushed to the Fedora 34 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2022-cf2784607b` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-cf2784607b See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2022-c844d2edcc has been pushed to the Fedora 35 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2022-c844d2edcc` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-c844d2edcc See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2022-cf2784607b has been pushed to the Fedora 34 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2022-c844d2edcc has been pushed to the Fedora 35 stable repository. If problem still persists, please make note of it in this bug report.