Entware OpenSSH is getting killed by... something.

[unsynaps]

Best I can tell I have OpenSSH installed properly. Using the same ansible scriptsI used before to get it installed and working.

But for some reason now the sshd process is killed seconds after launching. No errors in even the debug logs for sshd. Even running it via /opt/sbin/sshd -D it just says "killed" after a second or two.

At a loss as to why this is happening.

Oh yes and I know about the bug in /opt/etc/ssh/sshd_config. Fixed that after some hair pulling. Issue still persists.

 

[dave14305]

You can install strace from Entware and run strace /opt/sbin/sshd -D and see what system calls appear before being killed.

 

[unsynaps]

You can install strace from Entware and run strace /opt/sbin/sshd -D and see what system calls appear before being killed.

Ahh thank you. Was hoping there was something like this. Will kick it around this afternoon.

 

[RMerlin]

It's possibly killed by Asus' security daemon. A number of malware disguise themselves as the sshd process.

 

[unsynaps]

It's possibly killed by Asus' security daemon. A number of malware disguise themselves as the sshd process.

For the love of... I think this is it. Renamed /opt/sbin/sshd to <face+keyboard> and it doesn't get killed.

This must be something "new" as I never had this issue in the past.

Is there a more "elegant" way of dealing with this?