Date: Sat, 02 Sep 2000 22:21:31 +0100 From: Brian Somers <brian@Awfulhak.org> To: "Jacques A. Vidrine" <n@nectar.com> Cc: Neil Blakey-Milner <nbm@mithrandr.moria.org>, Poul-Henning Kamp <phk@critter.freebsd.dk>, Brian Somers <brian@Awfulhak.org>, Dan Nelson <dnelson@emsphone.com>, sthaug@nethelp.no, ume@FreeBSD.org, arch@FreeBSD.org, freebsd-arch@FreeBSD.org Subject: Re: setuid ssh should die Message-ID: <200009022121.e82LLV771512@hak.lan.Awfulhak.org> In-Reply-To: Message from "Jacques A. Vidrine" <n@nectar.com> of "Sat, 02 Sep 2000 16:01:56 CDT." <20000902160156.D1263@hamlet.nectar.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> On Sat, Sep 02, 2000 at 10:32:44PM +0200, Neil Blakey-Milner wrote:
> > On Sat 2000-09-02 (22:24), Poul-Henning Kamp wrote:
> > > Uhm, how about a ssh_config variable where you tell it to drop
> > > the setuid bit right away, wouldn't that work ?
> >
> > I'd prefer to leave it off. It means one less file to assure myself is
> > safe, if I were thinking with my paranoid security hat on.
>
> In addition to Neil's points, setuid executables ignore LD_LIBRARY_PATH
> and such, breaking SOCKS. ssh is the type of application one would
> expect to use with SOCKS, so I'd prefer not having the gratuitous setuid
> bit set.
What do people reckon then (-arch cc'd) ? I'll add
#ENABLE_SUIDSSH= true
to etc/defaults/make.conf then mention it in ssh_config and make the
adjustment to the ssh build so that it defaults to *not* being suid.
> --
> Jacques Vidrine / n@nectar.com / jvidrine@verio.net / nectar@FreeBSD.org
--
Brian <brian@Awfulhak.org> <brian@[uk.]FreeBSD.org>
<http://www.Awfulhak.org>; <brian@[uk.]OpenBSD.org>
Don't _EVER_ lose your sense of humour !
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200009022121.e82LLV771512>