Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.

Bug 119263

Summary:	sshd logs message containing garbage
Product:	[Fedora] Fedora	Reporter:	Alexandre Oliva <oliva>
Component:	openssh	Assignee:	Tomas Mraz <tmraz>
Status:	CLOSED WORKSFORME	QA Contact:	Brian Brock <bbrock>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rawhide	CC:	alan, wtogami
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-01-26 15:56:55 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	114961, 123268, 136451

Description Alexandre Oliva 2004-03-28 00:44:52 UTC

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040312

Description of problem:
When I ssh into a box as a user whose home dir is not labeled as such
(or something like that), openssh logs a message like this to
/var/log/messages:

Warning!  Could not relabel [garbage] with
system_u:object_r:sshd_devpts_t, not relabeling.

Sometimes [garbage] is just an empty string; sometimes it's actual
garbage.  Scary!

I can't tell for sure whether this has to do with the directory
labeling or with logging as a user other than root (it seems to never
happen for root, and always when logging in as myself, and my home dir
is not in /home so it's not labeled properly).

Oh, SELinux is enabled, but in permissive mode.

Version-Release number of selected component (if applicable):
openssh-3.6.1p2-34

How reproducible:
Always

Steps to Reproduce:
1.ssh into a box (localhost, for example) as a non-root user (that has
a homedir that's not labeled as such)
2.check the last few lines of /var/log/messages

Actual Results:  The warning above, with garbage instead of the pathname

Expected Results:  The pathname instead of garbage

Additional info:

I'm not sure this is a security issue, but I'm making it as such just
in case.  Garbage in such applications always gets me worried.

Comment 1 Alan Cox 2004-06-15 13:59:53 UTC

This isnt in 3.8.1

I've inspected the 3.8.1 SELinux changes and the all appear correct
and in order. Can you duplicate this with FC2, or close it ?

Comment 2 Tomas Mraz 2005-01-26 15:56:55 UTC

No response - closing, please reopen if still appears.