<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - [v220 regression] "Failed to unescape command line""
href="https://bugs.freedesktop.org/show_bug.cgi?id=90794">90794</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>[v220 regression] "Failed to unescape command line"
</td>
</tr>
<tr>
<th>Product</th>
<td>systemd
</td>
</tr>
<tr>
<th>Version</th>
<td>unspecified
</td>
</tr>
<tr>
<th>Hardware</th>
<td>Other
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>medium
</td>
</tr>
<tr>
<th>Component</th>
<td>general
</td>
</tr>
<tr>
<th>Assignee</th>
<td>systemd-bugs@lists.freedesktop.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>peter@lekensteyn.nl
</td>
</tr>
<tr>
<th>QA Contact</th>
<td>systemd-bugs@lists.freedesktop.org
</td>
</tr></table>
<p>
<div>
<pre>Since upgrading from v218-1 to systemd v220-3 (on Arch Linux), one of my
services fail to get parsed with the following error:
[/usr/lib/systemd/system/ssh-blocker.service:13] Failed to unescape command
line, ignoring: -/bin/sh -c "for ip in $(grep ^AllowUsers /etc/ssh/sshd_config
| grep -Po '\w+@\K[\d.]+'); do /usr/sbin/ipset -exist add ssh-whitelist $ip
timeout 0; done"
Line 13 is ([WRAP] added for clarity):
ExecStartPost=-/bin/sh -c "for ip in [WRAP]
$(grep ^AllowUsers /etc/ssh/sshd_config | [WRAP]
grep -Po '\w+@\K[\d.]+'); \
do /usr/sbin/ipset -exist add ssh-whitelist $ip timeout 0; done"
(service at
<a href="https://github.com/Lekensteyn/ssh-blocker/blob/master/systemd/ssh-blocker.service.in#L13">https://github.com/Lekensteyn/ssh-blocker/blob/master/systemd/ssh-blocker.service.in#L13</a>)
Another report is from the Debian people
(<a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787256">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787256</a>):
[/lib/systemd/system/sudo.service:7] Failed to unescape command line, ignoring:
/usr/bin/find /var/lib/sudo -exec /usr/bin/touch -d @0 '{}' \073
(service file at
<a href="http://anonscm.debian.org/cgit/collab-maint/sudo.git/tree/debian/sudo.service#n7">http://anonscm.debian.org/cgit/collab-maint/sudo.git/tree/debian/sudo.service#n7</a>)
It is probably related to this change (nowhere mentioned in NEWS...):
commit 4034a06ddb82ec9868cd52496fef2f5faa25575f (tags/v220~644)
Author: Lennart Poettering <<a href="mailto:lennart@poettering.net">lennart@poettering.net</a>>
Date: Mon Mar 23 18:55:36 2015 +0700
util: rework word parsing and c unescaping code</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the QA Contact for the bug.</li>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>