From owner-freebsd-security Mon Jan 10 15:33:49 2000 Delivered-To: freebsd-security@freebsd.org Received: from mx2.x-treme.gr (mx2.x-treme.gr [212.120.192.15]) by hub.freebsd.org (Postfix) with ESMTP id CD77414CD4 for ; Mon, 10 Jan 2000 15:33:29 -0800 (PST) (envelope-from keramida@diogenis.ceid.upatras.gr) Received: from localhost.hell.gr (pat53.x-treme.gr [212.120.197.245]) by mx2.x-treme.gr (8.9.3/8.9.3/IPNG-ADV-ANTISPAM-0.1) with SMTP id BAA16177 for ; Tue, 11 Jan 2000 01:30:59 +0200 Received: (qmail 83069 invoked by uid 1001); 10 Jan 2000 21:59:22 -0000 Date: Mon, 10 Jan 2000 23:59:22 +0200 From: Giorgos Keramidas To: Paulo Fragoso Cc: security@freebsd.org Subject: Re: Remote Commands Message-ID: <20000110235922.A82892@hades.hell.gr> Reply-To: keramida@ceid.upatras.gr References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0pre3i In-Reply-To: Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, Jan 10, 2000 at 11:51:40AM -0200, Paulo Fragoso wrote: > Hi, > > Is there any way to send enviroment viriables to remote machine using ssh? > > Now if I run "/usr/local/bin/ssh remote_machine env" I don't find the > origin enviroments virables. > > If this is possible, How insecure is send enviroment variables? The "environment" is a rather platform specific thing, IMHO. For instance, what does CVS_RSH mean to a machine that does not have CVS installed? Using the environment of a SunOS system to a Solaris system could also break a few things, here and there. No, in my opinion, passing the environment state oer the network is not in general a good thing. -- Giorgos Keramidas, < keramida @ ceid . upatras . gr > "What we have to learn to do, we learn by doing." [Aristotle] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message