Bug#986303: openssh-client: tries to place known_hosts in parent directory when .ssh is a symlink

Package: openssh-client
Version: 1:8.4p1-5
Severity: minor
X-Debbugs-Cc: [email protected]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I try to track all configuration seperately, which means
symlinking dotfiles in $HOME to a seperate folder, that is
a git repositiory.  SSH doesnt yet support the XDG spec for
home folders (AFAIK), which is fine, but it stubbornly
refuses to use the correct known_hosts file.

SSH will instead ignore the $HOME/.ssh/known-hosts file, which
is actually stored at $GIT-REPO-OF-DOTFILES/.ssh/known-hosts.
It tries to use $GIT-REPO/known-hosts instead, creating the file
as needed, and prompting that previously-connected hosts are
unknown.

I solved this issue simply by hard linking the proper file
and the one SSH thinks it needs.  I'd appreciate it if this
could be fixed longer-term, however.


- -- System Information:
Debian Release: bullseye/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-4-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_WARN
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openssh-client depends on:
ii  adduser           3.118
ii  dpkg              1.20.7.1
ii  libc6             2.31-10
ii  libedit2          3.1-20191231-2+b1
ii  libfido2-1        1.6.0-2
ii  libgssapi-krb5-2  1.18.3-4
ii  libselinux1       3.1-3
ii  libssl1.1         1.1.1k-1
ii  passwd            1:4.8.1-1
ii  zlib1g            1:1.2.11.dfsg-2

Versions of packages openssh-client recommends:
ii  xauth  1:1.1-1

Versions of packages openssh-client suggests:
pn  keychain      <none>
pn  libpam-ssh    <none>
ii  monkeysphere  0.43-3.1
ii  ssh-askpass   1:1.2.4.1-10+b1

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
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=z2Ei
-----END PGP SIGNATURE-----