On Tue, Mar 27, 2007 at 09:56:34PM +0200, Tasmanian Devil wrote:
> >> Has anybody an idea what I could do to find the cause of this
> >> "disappearing /dev/null"? Thank you in advance for your help!
> >
> >Well, it doesn't disappear so much as having its permissions altered,
> >but I'm certain you are aware of that.
> >
> >Are you sure it's OpenSSH? What other daemons are using to /dev/null
> >(fstat?)? It would make sense if some daemon thought it was a logfile or
> >somesuch and decided to 'secure' it...
>
> Hm, fstat doesn't show much unusual, mainly httpd and mysql besides
> the standard daemons. I have the same combination of daemons running
> on older machines (GENERIC 4.0 -stable without ACPI though), but no
> problem there.
>
> The permissions of /dev/null change directly after (or maybe even
> while) using SFTP, and not always. Sometimes I can log in several
> times over a few hours without fixing /dev/null, and then again only
> one single time. E.g. right now I can't reproduce the error. And if I
> don't use SCP/SFTP at all, everything works fine, for weeks, so it
> seems to be related to SCP/SFTP. Probably it's only happening after
> using SFTP (and SCP doesn't work afterwards), but unfortunately I'm
> not sure as I don't transfer files that often.
>
> I'll search in the direction of other deamons though. Thank you for the
> hint!
If that doesn't turn up anything, could you post /etc/sshd_config? And,
perhaps, the result of ssh -vvv your.problematic.host?
Joachim
