Bug#1018260: openssh-server: fills the log with "deprecated reading of user environment enabled"

On Sun, 28 Aug 2022 07:58:19 +0200 Francesco Potortì <[email protected]> wrote:
> Package: openssh-server
> Version: 1:9.0p1-1+b1
> Severity: minor
> X-Debbugs-Cc: none, Francesco Potortì <[email protected]>
> File: /usr/sbin/sshd
> 
> Dear Maintainer,
> 
> My log is full of these:
>  sshd[4180530]: pam_env(sshd:session): deprecated reading of user environment enabled

This comes from /etc/pam.d/sshd:
session    required     pam_env.so user_readenv=1 envfile=/etc/default/locale

I'm not sure this is sshd issue or pam issue really: if it is deprecated
in pam_env, sshd should not be using it, or it should not be deprecated.

Removing user_readenv=1 fixes this.

> There are two-four lines per minute

This means you have 2-4 logins per minute, which might be quite high.
These are real logins, successful, not just login probes from all over
the world trying to guess your passwords.

/mjt, who is not an openssh package maintainer.