SolarIS VM configure sftp. After restart ssh, the sshd_config file resets?

veryangryman · 27-03-2024 12:13PM #1

How do i avoid this happening, i need the sshd_config file to contain

Subsystem sftp /usr/lib/ssh/sftp-server

root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# echo "Subsystem sftp /usr/lib/ssh/sftp-server" >> /etc/ssh/sshd_config

root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# ls -ltr /etc/ssh/sshd_config

-rw-r--r-- 1 root sys 2435 Mar 27 12:11 /etc/ssh/sshd_config

But when i restart the contents reset. Ive even tried changing permissions so that the kernel cant get at it

root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# chmod 444 /etc/ssh/sshd_config

root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# ls -ltr /etc/ssh/sshd_config

-r--r--r-- 1 root sys 2435 Mar 27 12:11 /etc/ssh/sshd_config

root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# svcadm restart ssh root@uln-pca-oracle-solaris-11-2023-10-16fqbbqv:/export/home/opc# ls -ltr /etc/ssh/sshd_config

But she still manages

-rw-r--r-- 1 root sys 2386 Mar 27 12:11 /etc/ssh/sshd_config

27-03-2024 04:05PM

Stop the service first, then edit the file. Does it still overwrite it?

veryangryman · 27-03-2024 04:29PM

Tried that just now. Disabled ssh, edit file, enable ssh and it resets it again ugh

27-03-2024 04:43PM

Does /usr/lib/ssh/sftp-server definitely exist? sshd might remove bad config lines automatically.

If you just add a new commented line instead, does that persist?

veryangryman · 27-03-2024 04:57PM

Tried a comment, it still reset that

veryangryman · 27-03-2024 05:00PM

opc@uln-pca-oracle-solaris-11-2023-10-16xfi9vf:~$ ls /usr/lib/ssh/sftp-server

/usr/lib/ssh/sftp-server

27-03-2024 10:07PM

Odd one. You could try modifying the permissions on /etc/ssh/ - I assume what's happening is that the daemon is deleting the file, which it doesn't need permissions on the file for, it needs write permission on the directory. Change the directory permission to 544 and that might prevent it.

You could also see if running the daemon manually also reverts the file. Stop the service, make the change, then run sshd -D manually. If the file isn't reverted, it's something to do with svcadm. If it is, then it's sshd itself

Talisman · 18-06-2024 04:37PM

https://www.boards.ie/discussion/2058343832/solaris-vm-configure-sftp-after-restart-ssh-the-sshd-config-file-resets

I'm not familiar with Solaris but the behaviour you describe suggests that the file is being generated when the service is started. In which case the configuration is taken from another source.

A bit of Googling reveals this is quite possibly the case. Look in /lib/svc/stencils for the configuration you need to change.

https://blogs.oracle.com/solaris/post/introducing-smf-stencils

https://docs.oracle.com/cd/E37838_01/html/E61677/howtostencilsvcs.html

SolarIS VM configure sftp. After restart ssh, the sshd_config file resets?

Comments