Permission denied when using -T flag (ssh-audit installed by snap)
See original GitHub issuessh-audit installed with snap
ubuntu@ip-xx-xx-30-85:~$ snap info ssh-audit
name: ssh-audit
summary: ssh-audit
publisher: Joe Testa (positronsecurity)
store-url: https://snapcraft.io/ssh-audit
contact: jtesta@positronsecurity.com
license: MIT
description: |
SSH server and client security configuration auditor. Official repository:
<https://github.com/jtesta/ssh-audit>
commands:
- ssh-audit
snap-id: fuKZFTS5PBD7Lz2T761PRMibsSqbSP8l
tracking: latest/stable
refresh-date: today at 09:38 UTC
channels:
latest/stable: 2.5.0-1 2021-08-26 (4) 6MB -
latest/candidate: ↑
latest/beta: 2.2.0-1 2020-03-13 (1) 9MB -
latest/edge: ↑
installed: 2.5.0-1 (4) 6MB -
Input file with SSH targets
ubuntu@ip-xx-xx-30-85:~$ ls -la ssh-parsed.txt
-rw-rw-r-- 1 ubuntu ubuntu 15 Oct 8 09:49 ssh-parsed.txt
ubuntu@ip-xx-xx-30-85:~$ cat ssh-parsed.txt
xx.xx.30.85:22
Running ssh-audit with -T flag gives permission denied error
ubuntu@ip-xx-xx-30-85:~$ ssh-audit -T ssh-parsed.txt
Traceback (most recent call last):
File "/snap/ssh-audit/4/bin/ssh-audit", line 8, in <module>
sys.exit(main())
File "/snap/ssh-audit/4/lib/python3.8/site-packages/ssh_audit/ssh_audit.py", line 1047, in main
aconf = process_commandline(out, sys.argv[1:], usage)
File "/snap/ssh-audit/4/lib/python3.8/site-packages/ssh_audit/ssh_audit.py", line 684, in process_commandline
with open(aconf.target_file, 'r', encoding='utf-8') as f:
PermissionError: [Errno 13] Permission denied: 'ssh-parsed.txt'
Running as sudo gives the same error
ubuntu@ip-xx-xx-30-85:~$ sudo ssh-audit -T ssh-parsed.txt
Traceback (most recent call last):
File "/snap/ssh-audit/4/bin/ssh-audit", line 8, in <module>
sys.exit(main())
File "/snap/ssh-audit/4/lib/python3.8/site-packages/ssh_audit/ssh_audit.py", line 1047, in main
aconf = process_commandline(out, sys.argv[1:], usage)
File "/snap/ssh-audit/4/lib/python3.8/site-packages/ssh_audit/ssh_audit.py", line 684, in process_commandline
with open(aconf.target_file, 'r', encoding='utf-8') as f:
PermissionError: [Errno 13] Permission denied: 'ssh-parsed.txt'
However passing target directly as an ssh-audit argument works
ubuntu@ip-xx-xx-30-85:~$ ssh-audit xx.xx.30.85:22
# general
(gen) banner: SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3
(gen) software: OpenSSH 8.2p1
(gen) compatibility: OpenSSH 7.4+, Dropbear SSH 2018.76+
(gen) compression: enabled (zlib@openssh.com)
...
Linux information
ubuntu@ip-xx-xx-30-85:~$ uname -a
Linux ip-xx-xx-30-85 5.11.0-1019-aws #20~20.04.1-Ubuntu SMP Tue Sep 21 10:40:39 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Issue Analytics
- State:
- Created 2 years ago
- Comments:5 (2 by maintainers)
Top Results From Across the Web
Permission denied error when running apps installed as ...
Same happens in Ubuntu 18.04. If the user home directory is not under the /home (or / ) mount, it not possible to...
Read more >snap-installed version gets Permission denied when ...
I recently installed a new Ubuntu server ("bionic"), and was flattered to see that wormhole is offered (next to docker and kubernetes and ......
Read more >[Solved] "Permission denied" in general | Ubuntu 19.10
Note that I have GNOME, KDE, and XFCE installed. Using KDE because I found it did freeze like GNOME for me. :~$ snap...
Read more >Linux, snap, and Mysterious File Permission Errors
The Symptom. I installed a snap package. I tried to run it. I saw this: PermissionError: [Errno 13] Permission denied: ...
Read more >with open(result.csv , a, newline=, encoding='utf-8') as f
jtesta/ssh-auditPermission denied when using -T flag (ssh-audit installed by snap)#124. Created about 1 year ago. 5. ssh-audit installed with snap.
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
@MMquant I published an updated Snap package (2.5.0-2). I think updates are applied automatically every 6(?) hours, so you’ll get it soon. Or you can manually run
sudo snap refresh
to force an update.Once you have 2.5.0-2 (you can check with
snap info ssh-audit
), you can optionally give it read & write permissions to your home directory with the following command:sudo snap connect ssh-audit:home :home
(note that hidden files and directories would still be disallowed). And either way,$HOME/snap/ssh-audit/common/
will always be readable & writable.Thanks for reporting this issue! If you run into any more problems, please let me know!
@MMquant The Snap system is preventing file reads and writes to any path other than
$HOME/snap/ssh-audit/common/
. So one workaround is to put your list of targets in that directory.I’m currently preparing a fix that would allow users to grant access to their home directory, as well as give more informative error messages when Snap prevents access. Stay tuned!