Mercurial > dropbear
annotate .gitignore @ 1930:299f4f19ba19
Add /usr/sbin and /sbin to default root PATH
When dropbear is used in a very restricted environment (such as in a
initrd), the default user shell is often also very restricted
and doesn't take care of setting the PATH so the user ends up
with the PATH set by dropbear. Unfortunately, dropbear always
sets "/usr/bin:/bin" as default PATH even for the root user
which should have /usr/sbin and /sbin too.
For a concrete instance of this problem, see the "Remote Unlocking"
section in this tutorial: https://paxswill.com/blog/2013/11/04/encrypted-raspberry-pi/
It speaks of a bug in the initramfs script because it's written "blkid"
instead of "/sbin/blkid"... this is just because the scripts from the
initramfs do not expect to have a PATH without the sbin directories and
because dropbear is not setting the PATH appropriately for the root user.
I'm thus suggesting to use the attached patch to fix this misbehaviour (I
did not test it, but it's easy enough). It might seem anecdotic but
multiple Kali users have been bitten by this.
From https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=903403
author | Raphael Hertzog <hertzog@debian.org> |
---|---|
date | Mon, 09 Jul 2018 16:27:53 +0200 |
parents | 70f05f7d4d11 |
children |
rev | line source |
---|---|
1393 | 1 *~ |
2 *.o | |
3 *.a | |
4 *.da | |
5 *.bb | |
6 *.bbg | |
7 *.prof | |
1653
76189c9ffea2
External Public-Key Authentication API (#72)
fabriziobertocci <fabriziobertocci@gmail.com>
parents:
1540
diff
changeset
|
8 .*.swp |
1393 | 9 /autom4te.cache |
10 /config.log | |
11 /config.status | |
12 /dbclient | |
13 /dropbear | |
14 /dropbearconvert | |
15 /dropbearkey | |
16 /dropbearmulti | |
1655
f52919ffd3b1
update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79)
Steffen Jaeckel <s_jaeckel@gmx.de>
parents:
1653
diff
changeset
|
17 /fuzzcorpus |
f52919ffd3b1
update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79)
Steffen Jaeckel <s_jaeckel@gmx.de>
parents:
1653
diff
changeset
|
18 /fuzzer-* |
f52919ffd3b1
update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79)
Steffen Jaeckel <s_jaeckel@gmx.de>
parents:
1653
diff
changeset
|
19 /fuzzer-*.options |
1393 | 20 /scp |
21 /scp-progress | |
22 config.h | |
1540
03a42f41cf2c
ignore default_options_guard.h
Matt Johnston <matt@ucc.asn.au>
parents:
1393
diff
changeset
|
23 default_options_guard.h |
1922
70f05f7d4d11
Default options comments, ignore localoptions.h
Begley Brothers Inc <begleybrothers@gmail.com>
parents:
1838
diff
changeset
|
24 localoptions.h |
70f05f7d4d11
Default options comments, ignore localoptions.h
Begley Brothers Inc <begleybrothers@gmail.com>
parents:
1838
diff
changeset
|
25 Makefile |
1653
76189c9ffea2
External Public-Key Authentication API (#72)
fabriziobertocci <fabriziobertocci@gmail.com>
parents:
1540
diff
changeset
|
26 tags |
1838
60cd5cdb165c
Update .hgignore and .gitignore with tests
Matt Johnston <matt@codeconstruct.com.au>
parents:
1814
diff
changeset
|
27 .pytest* |
60cd5cdb165c
Update .hgignore and .gitignore with tests
Matt Johnston <matt@codeconstruct.com.au>
parents:
1814
diff
changeset
|
28 *.pyc |
60cd5cdb165c
Update .hgignore and .gitignore with tests
Matt Johnston <matt@codeconstruct.com.au>
parents:
1814
diff
changeset
|
29 /test/venv |