Date: Tue, 20 Feb 2001 11:26:55 -0800 From: Kris Kennaway <kris@obsecurity.org> To: Fernando Schapachnik <fschapachnik@vianetworks.com.ar> Cc: security@FreeBSD.ORG Subject: Re: Inconsistent behavior on openssh Message-ID: <20010220112654.A35156@mollari.cthul.hu> In-Reply-To: <200102201215.JAA39014@ns1.via-net-works.net.ar>; from fpscha@ns1.via-net-works.net.ar on Tue, Feb 20, 2001 at 09:15:59AM -0300 References: <20010219153542.A54742@mollari.cthul.hu> <200102201215.JAA39014@ns1.via-net-works.net.ar>
next in thread | previous in thread | raw e-mail | index | archive | help
--+HP7ph2BbKc20aGI
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Feb 20, 2001 at 09:15:59AM -0300, Fernando Schapachnik wrote:
> En un mensaje anterior, Kris Kennaway escribi=F3:
> > > Simply install your ~/.ssh/identity.pub in your remote account's
> > > ~/.ssh/authorized_keys file. That's why I use. I've never in my
> > > life used .rhosts or .shosts with ssh.
> >=20
> > Or if you really want to use RhostsRSAAuthentication, rebuild sshd
> > with ENABLE_SUID_SSH=3Dtrue in /etc/make.conf
>=20
> I don't think it will sufice:
>=20
> ssh.c:
> /* Disable rhosts authentication if not running as root. */
> if (original_effective_uid !=3D 0 ||!options.use_privileged_port) {
> options.rhosts_authentication =3D 0;
> options.rhosts_rsa_authentication =3D 0;=20
>=20
>=20
> It's not #ifdef'd.
Erm - if it's setuid root (controlled by the makefile when it's
installed), the original_effective_uid =3D=3D 0.
Kris
--+HP7ph2BbKc20aGI
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org
iD8DBQE6ksT+Wry0BWjoQKURAnL/AJwJFlOkOQHLeNBSHcUIIC0Dsw1lOQCfWOe9
hW8ANsa+DvXEt3Y/emjeIrE=
=TtS/
-----END PGP SIGNATURE-----
--+HP7ph2BbKc20aGI--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010220112654.A35156>