Skip to main content
ALT Linux Bugzilla
– Attachment 22825 Details for
Bug 61147
Поломка sshd_config при наличии блока Match (ошибка "Directive 'Port' is not allowed within a Match block")
New bug
|
Search
|
[?]
|
Help
Register
|
Log In
[x]
|
Forgot Password
Login:
[x]
|
EN
|
RU
journalctl
journalctl altcenter.txt (text/plain), 4.27 KB, created by
Балбеков Павел Дмитриевич
on 2026-10-28 11:29:49 MSK
(
hide
)
Description:
journalctl
Filename:
MIME Type:
Creator:
Балбеков Павел Дмитриевич
Created:
2026-10-28 11:29:49 MSK
Size:
4.27 KB
patch
obsolete
>Ð¾ÐºÑ 28 10:55:15 kworkstation-11-4-x86-64-legacy-ext4-20261023.localdomain pkexec[4783]: test: Error executing command as another user: Not authorized [USER=root] [TTY=unknown] [CWD=/home/test] [COMMAND=/bin/sh -c cat /etc/audit/auditd.conf > /tmp/altcenter_auditd.conf && chmod 644 /tmp/altcenter_auditd.conf && cat /etc/audit/rules.d/*.rules > /tmp/altcenter_audit.rules 2>/dev/null || : && chmod 644 /tmp/altcenter_audit.rules 2>/dev/null || : && cat /etc/login.defs > /tmp/altcenter_login.defs 2>/dev/null || : && chmod 644 /tmp/altcenter_login.defs 2>/dev/null || : && cat /etc/openssh/sshd_config > /tmp/altcenter_sshd_config 2>/dev/null || : && chmod 644 /tmp/altcenter_sshd_config 2>/dev/null || : && (sysctl -a 2>/dev/null | grep '^kernel\.altha\.' > /tmp/altcenter_altha_sysctl || :) && chmod 644 /tmp/altcenter_altha_sysctl && /usr/bin/python3 /usr/share/altcenter/res/fstec_check.py] >Ð¾ÐºÑ 28 10:55:28 kworkstation-11-4-x86-64-legacy-ext4-20261023.localdomain polkitd[967]: Operator of unix-session:4 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action org.freedesktop.policykit.exec for unix-process:3952:523824 [/usr/bin/python3 /usr/bin/altcenter] (owned by unix-user:test) >Ð¾ÐºÑ 28 10:55:29 kworkstation-11-4-x86-64-legacy-ext4-20261023.localdomain pkexec[4758]: test: Executing command [USER=root] [TTY=unknown] [CWD=/home/test] [COMMAND=/bin/sh -c cat /etc/audit/auditd.conf > /tmp/altcenter_auditd.conf && chmod 644 /tmp/altcenter_auditd.conf && cat /etc/audit/rules.d/*.rules > /tmp/altcenter_audit.rules 2>/dev/null || : && chmod 644 /tmp/altcenter_audit.rules 2>/dev/null || : && cat /etc/login.defs > /tmp/altcenter_login.defs 2>/dev/null || : && chmod 644 /tmp/altcenter_login.defs 2>/dev/null || : && cat /etc/openssh/sshd_config > /tmp/altcenter_sshd_config 2>/dev/null || : && chmod 644 /tmp/altcenter_sshd_config 2>/dev/null || : && (sysctl -a 2>/dev/null | grep '^kernel\.altha\.' > /tmp/altcenter_altha_sysctl || :) && chmod 644 /tmp/altcenter_altha_sysctl && /usr/bin/python3 /usr/share/altcenter/res/fstec_check.py] >Ð¾ÐºÑ 28 10:55:47 kworkstation-11-4-x86-64-legacy-ext4-20261023.localdomain polkitd[967]: Operator of unix-session:4 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action org.freedesktop.policykit.exec for unix-process:3952:523824 [/usr/bin/python3 /usr/bin/altcenter] (owned by unix-user:test) >Ð¾ÐºÑ 28 10:55:47 kworkstation-11-4-x86-64-legacy-ext4-20261023.localdomain pkexec[4869]: test: Executing command [USER=root] [TTY=unknown] [CWD=/home/test] [COMMAND=/usr/bin/sh -c conf=$(test -f /etc/openssh/sshd_config && echo /etc/openssh/sshd_config || echo /etc/ssh/sshd_config); cp -a "$conf" "$conf.altcenter.bak"; sed -i -E '/^[[:space:]]*#?[[:space:]]*PermitRootLogin([[:space:]]+|$)/Id' "$conf"; echo 'PermitRootLogin without-password' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*PubkeyAuthentication([[:space:]]+|$)/Id' "$conf"; echo 'PubkeyAuthentication yes' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*PermitEmptyPasswords([[:space:]]+|$)/Id' "$conf"; echo 'PermitEmptyPasswords no' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*HostbasedAuthentication([[:space:]]+|$)/Id' "$conf"; echo 'HostbasedAuthentication no' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*IgnoreRhosts([[:space:]]+|$)/Id' "$conf"; echo 'IgnoreRhosts yes' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*Protocol([[:space:]]+|$)/Id' "$conf"; echo 'Protocol 2' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*AllowUsers([[:space:]]+|$)/Id' "$conf"; echo 'AllowUsers global_user testuser2' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*AllowGroups([[:space:]]+|$)/Id' "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*Port([[:space:]]+|$)/Id' "$conf"; echo 'Port 22' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*ClientAliveInterval([[:space:]]+|$)/Id' "$conf"; echo 'ClientAliveInterval 0' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*ClientAliveCountMax([[:space:]]+|$)/Id' "$conf"; echo 'ClientAliveCountMax 3' >> "$conf"; chown root:root "$conf"; chmod 644 "$conf"; if ! sshd -t -f "$conf"; then cp -a "$conf.altcenter.bak" "$conf"; exit 1; fi; cp "$conf" /tmp/altcenter_sshd_config && chmod 644 /tmp/altcenter_sshd_config && (systemctl reload sshd || systemctl reload ssh || systemctl restart sshd || systemctl restart ssh)]
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 61147
:
22762
|
22763
| 22825