SolarIS VM configure sftp. After restart ssh, the sshd_config file resets?

veryangryman

How do i avoid this happening, i need the sshd_config  file to contain

Subsystem    sftp  /usr/lib/ssh/sftp-server

root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# echo "Subsystem    sftp  /usr/lib/ssh/sftp-server" >> /etc/ssh/sshd_config

root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# ls -ltr /etc/ssh/sshd_config

-rw-r--r--  1 root   sys     2435 Mar 27 12:11 /etc/ssh/sshd_config

But when i restart the contents reset. Ive even tried changing permissions so that the kernel cant get at it

root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# chmod 444 /etc/ssh/sshd_config

root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# ls -ltr /etc/ssh/sshd_config

-r--r--r--  1 root   sys     2435 Mar 27 12:11 /etc/ssh/sshd_config

root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# svcadm restart ssh                  root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# ls -ltr /etc/ssh/sshd_config

But she still manages

-rw-r--r--  1 root   sys     2386 Mar 27 12:11 /etc/ssh/sshd_config

28064212

Stop the service first, then edit the file. Does it still overwrite it?

veryangryman

Tried that just now. Disabled ssh, edit file, enable ssh and it resets it again ugh

28064212

Does /usr/lib/ssh/sftp-server definitely exist? sshd might remove bad config lines automatically.

If you just add a new commented line instead, does that persist?

veryangryman

Tried a comment, it still reset that

veryangryman

opc@uln-pca-oracle-solaris-11-2023-10-16xfi9vf:~$ ls /usr/lib/ssh/sftp-server

/usr/lib/ssh/sftp-server

28064212

Odd one. You could try modifying the permissions on /etc/ssh/ - I assume what's happening is that the daemon is deleting the file, which it doesn't need permissions on the file for, it needs write permission on the directory. Change the directory permission to 544 and that might prevent it.

You could also see if running the daemon manually also reverts the file. Stop the service, make the change, then run sshd -D manually. If the file isn't reverted, it's something to do with svcadm. If it is, then it's sshd itself