Skip to content

Should OpenSSH relinquish file_link_any privilege ? #24

@dca58

Description

@dca58

Trying to do a sftp "rename toto titi" fails with a permission denied when the owner of the file is not the connected user (even though the file is writeable by anyone, as well as its containing directory).

Tracing sshd with truss shows the offending system call:
link(".../toto", ".../titi") Err#1 EPERM [file_link_any]

This only happens when the client does not support the [email protected] otherwise a rename is done instead of a pair of link/unlink.
Test client: Sun_SSH_1.5, SSH protocols 1.5/2.0, OpenSSL 0x1000107f from omnios-6de5e81
Test Server: OpenSSH_7.1p2, OpenSSL 1.0.1p 9 Jul 2015 from http://pkgsrc.joyent.com/packages/SmartOS/2015Q4/x86_64/All

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions