From owner-freebsd-security  Tue Feb 20 11:26:59 2001
Delivered-To: freebsd-security@freebsd.org
Received: from obsecurity.dyndns.org (adsl-64-165-226-53.dsl.lsan03.pacbell.net [64.165.226.53])
	by hub.freebsd.org (Postfix) with ESMTP id 6E8B937B4EC
	for <security@FreeBSD.ORG>; Tue, 20 Feb 2001 11:26:55 -0800 (PST)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 266F566F2E; Tue, 20 Feb 2001 11:26:55 -0800 (PST)
Date: Tue, 20 Feb 2001 11:26:55 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: Fernando Schapachnik <fschapachnik@vianetworks.com.ar>
Cc: security@FreeBSD.ORG
Subject: Re: Inconsistent behavior on openssh
Message-ID: <20010220112654.A35156@mollari.cthul.hu>
References: <20010219153542.A54742@mollari.cthul.hu> <200102201215.JAA39014@ns1.via-net-works.net.ar>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="+HP7ph2BbKc20aGI"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <200102201215.JAA39014@ns1.via-net-works.net.ar>; from fpscha@ns1.via-net-works.net.ar on Tue, Feb 20, 2001 at 09:15:59AM -0300
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


--+HP7ph2BbKc20aGI
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Feb 20, 2001 at 09:15:59AM -0300, Fernando Schapachnik wrote:
> En un mensaje anterior, Kris Kennaway escribi=F3:
> > >     Simply install your ~/.ssh/identity.pub in your remote account's
> > >     ~/.ssh/authorized_keys file.  That's why I use.  I've never in my
> > >     life used .rhosts or .shosts with ssh.
> >=20
> > Or if you really want to use RhostsRSAAuthentication, rebuild sshd
> > with ENABLE_SUID_SSH=3Dtrue in /etc/make.conf
>=20
> I don't think it will sufice:
>=20
> ssh.c:
> /* Disable rhosts authentication if not running as root. */
> if (original_effective_uid !=3D 0 ||!options.use_privileged_port) {
>              options.rhosts_authentication =3D 0;
>              options.rhosts_rsa_authentication =3D 0;=20
>=20
>=20
> It's not #ifdef'd.

Erm - if it's setuid root (controlled by the makefile when it's
installed), the original_effective_uid =3D=3D 0.

Kris

--+HP7ph2BbKc20aGI
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE6ksT+Wry0BWjoQKURAnL/AJwJFlOkOQHLeNBSHcUIIC0Dsw1lOQCfWOe9
hW8ANsa+DvXEt3Y/emjeIrE=
=TtS/
-----END PGP SIGNATURE-----

--+HP7ph2BbKc20aGI--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message