From owner-freebsd-arch Sat Sep 2 16: 1:46 2000 Delivered-To: freebsd-arch@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id B800437B424; Sat, 2 Sep 2000 16:01:44 -0700 (PDT) Received: from localhost (kris@localhost) by freefall.freebsd.org (8.9.3/8.9.2) with ESMTP id QAA88365; Sat, 2 Sep 2000 16:01:44 -0700 (PDT) (envelope-from kris@FreeBSD.org) X-Authentication-Warning: freefall.freebsd.org: kris owned process doing -bs Date: Sat, 2 Sep 2000 16:01:44 -0700 (PDT) From: Kris Kennaway To: Brian Somers Cc: freebsd-arch@FreeBSD.org Subject: Re: setuid ssh should die In-Reply-To: <200009022257.e82MvK775931@hak.lan.Awfulhak.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, 2 Sep 2000, Brian Somers wrote: > Wait... I'm missing something here. It seems that ssh will exec rsh > when FallBackToRsh is enabled. It therefore doesn't need root for > anything I know of. Perhaps you didnt read the rest of the thread. The setuid root isn't for FallBackToRsh, it's for RhostsRSAAuthentication Kris -- In God we Trust -- all others must submit an X.509 certificate. -- Charles Forsythe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message