Wind River Support Network

HomeDefectsLINCD-1006

Fixed

LINCD-1006 : [sshd] /etc/hosts.deny does not work for sshd

Created: Feb 5, 2020 Updated: Feb 24, 2020

Resolved Date: Feb 19, 2020

Found In Version: 10.20.9.0

Fix Version: 10.20.9.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Userspace

Description

root@intel-x86-64:~# cat /etc/hosts.deny
root@intel-x86-64:~#
root@intel-x86-64:~# ssh root@127.0.0.1
root@127.0.0.1's password:
Last login: Thu Feb  6 07:00:38 2020 from 128.224.162.166
root@intel-x86-64:~# exit
logout
Connection to 127.0.0.1 closed.
root@intel-x86-64:~#  echo "sshd: 127.0.0.1" > /etc/hosts.deny
root@intel-x86-64:~#
root@intel-x86-64:~# cat /etc/hosts.deny
sshd: 127.0.0.1
root@intel-x86-64:~# ssh root@127.0.0.1
 
 
 
root@127.0.0.1's password:
Last login: Thu Feb  6 07:03:25 2020 from 127.0.0.1
root@intel-x86-64:~# exit
logout
Connection to 127.0.0.1 closed.
root@intel-x86-64:~#

Workaround

N/A

Steps to Reproduce

1) setup.sh
  /lpg-build/cdc/fast_prod/WRLINUX_CI/RC_GIT/wrlinux-10/setup.sh  --machine intel-x86-64 --dl-layers --distro wrlinux-cgl --templates feature/xfce feature/consul feature/dhcp-server-kea feature/ipv6 feature/kubernetes feature/nfsd feature/ntp feature/test --layers meta-filesystems meta-security-compliance meta-virtualization --dl-layers 2). ./environment-setup-x86_64-wrlinuxsdk-linux
 3). ./oe-init-build-env build_test
 4)IMAGE_INSTALL_append += "openssh-sshd openssh-ssh"
 5) bitbake wrlinux-image-glibc-cgl
 6) boot on target and harddisk startup
 7) run command as problem descriptio