Mantis - openssh
Viewing Issue Advanced Details
4417 packaging tweak always 2010-05-14 20:25 2010-12-17 00:12
ckmehta1  
yann  
low  
closed  
no change required  
none    
none  
0004417: SSHD User's Home Directory
I was reviewing what components are in the package and I saw this directory in the package map file:
/var/empty

After some research for /var/empty and OpenSSH, I see its typically used as the home directory for the sshd user created in "preinstall" script. However the home directory for the sshd user in that script is "/var/run".

I am thinking it might be advisable to make the home-directory for that user the /var/empty directory.


Some links on the subject:
http://serverfault.com/questions/116632/what-is-var-empty-and-why-is-this-directory-used-by-sshd [^]
http://www.sunfreeware.com/README.privsep [^]
Issue History
2010-05-14 20:25 ckmehta1 New Issue
2010-08-31 15:50 yann Note Added: 0008226
2010-08-31 15:50 yann Assigned To => yann
2010-08-31 15:50 yann Status new => feedback
2010-08-31 15:50 yann Resolution open => no change required
2010-11-19 22:02 yann Note Added: 0008470
2010-12-17 00:12 yann Note Added: 0008579
2010-12-17 00:12 yann Status feedback => closed

Notes
(0008226)
yann   
2010-08-31 15:50   

As you can read in README.privsep, the PRIVSEP directory is not set by changing the sshd home directory but by using the --with-privsep-path configure option.

So the sshd home directory is not really important. Do you see a case where it would not safe to have /var/run as the home directory ?
(0008470)
yann   
2010-11-19 22:02   
No news, good news ?
(0008579)
yann   
2010-12-17 00:12   
No news, good news: I am closing this bug.
Feel free to reopen a bug if necessary.