#754082 OpenSSH client: add X forwarding support for systems using pam_namespace.so

Package:
openssh-client
Source:
openssh
Description:
secure shell (SSH) client, for secure access to remote machines
Submitter:
Mike Gabriel
Date:
2014-07-07 11:51:07 UTC
Severity:
normal
#754082#5
Date:
2014-07-07 11:46:18 UTC
From:
To:
Package: openssh-client
Severity: normal
Version: 1:6.6p1-
Tags: patch

With the current OpenSSH client in Debian unstable (1:6.6p1-6) it is
not possible to have

  (a) pam_namespace.so in use
  (b) ssh -X <me>@<somehost> xterm

The reason is that Debian's OpenSSH client is not able to access X11's
kernel namespace sockets. It tries to access /tmp/.X11-unix/X0 and
fails (because with pam_namespace.so the X11 socket(s) are not
accessible for the user).

In Fedora, there is a patch against some earlier OpenSSH version that
should be easily adoptable [1].

Regards,
Mike

[1]
http://pkgs.fedoraproject.org/cgit/openssh.git/tree/openssh-5.5p1-x11.patch