Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 04 Nov 2002 12:04:31 +0100
From:      Dag-Erling Smorgrav <des@ofug.org>
To:        Markus Friedl <markus@openbsd.org>
Cc:        Alexander Leidinger <Alexander@Leidinger.net>, current@freebsd.org, openssh@openbsd.org
Subject:   Re: ssh-agent broken with pam_ssh for xdm (+ fix for ssh-agent.c)
Message-ID:  <xzpadkpzjcw.fsf@flood.ping.uio.no>
In-Reply-To: <20021104092329.GA1677@folly> (Markus Friedl's message of "Mon, 4 Nov 2002 10:23:29 %2B0100")
References:  <20021103204902.3c6b3705.Alexander@Leidinger.net> <20021104092329.GA1677@folly>

next in thread | previous in thread | raw e-mail | index | archive | help
Markus Friedl <markus@openbsd.org> writes:
> yes, geteuid() could work, too, but why is ssh-agent running
> with a privileged user id?  shouldn't both the real and
> effective user id be the uid of the user?

There seems to be a bug in our pam_ssh(8).  It switches to user
privileges when reading the user's keys, but switches back before
starting the agent, instead of after.

DES
-- 
Dag-Erling Smorgrav - des@ofug.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpadkpzjcw.fsf>