Skip to content

Commit 5f4bb13

Browse files
committed
profiles: ssh: add ${RUNUSER}/gvfsd-sftp
Based on the report by @Saren-Arterius[1]: Since GNOME gvfs 1.53+, the ssh client options `ControlMaster=auto` and `ControlPath=/run/user/$UID/gvfsd-sftp/%C` are used to mount sftp. Since `/run/user/$UID/gvfsd-sftp` is not whitelisted, gvfs sftp mount with nautilus will fail with a meaningless error message shown in the UI. Steps to reproduce[1]: Prepare ssh server or localhost, then run: ssh -o"ForwardX11 no" -o"ForwardAgent no" \ -o"PermitLocalCommand no" -o"ClearAllForwardings yes" \ -o"NoHostAuthenticationForLocalhost yes" \ -o"ControlMaster auto" \ -o"ControlPath=/run/user/${UID}/gvfsd-sftp/test" \ -s {SSH_HOST} sftp stderr shows: unix_listener: cannot bind to path /run/user/$UID/gvfsd-sftp/test.{RANDOM_STRING}: No such file or directory And ssh exits with error code 255. Fixes #5816. [1] #5816 (comment) Reported-by: @Saren-Arterius Suggested-by: @Saren-Arterius Reported-by: @Alex-Farol Reported-by: @mirko
1 parent 3bbc6b5 commit 5f4bb13

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

etc/profile-m-z/ssh.profile

+1
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ include disable-programs.inc
2121
whitelist ${RUNUSER}/gcr/ssh
2222
whitelist ${RUNUSER}/gnupg/*/S.gpg-agent.ssh # custom gpg homedir setup
2323
whitelist ${RUNUSER}/gnupg/S.gpg-agent.ssh # default gpg homedir setup
24+
whitelist ${RUNUSER}/gvfsd-sftp
2425
whitelist ${RUNUSER}/keyring/ssh
2526
include whitelist-runuser-common.inc
2627
include whitelist-usr-share-common.inc

0 commit comments

Comments
 (0)