[Bug 1893] change ssh-keysign to setgid from setuid

Fri Jun 3 10:41:24 EST 2011

https://bugzilla.mindrot.org/show_bug.cgi?id=1893

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
            Summary|change ssh-keisign to       |change ssh-keysign to
                   |setgid from setuid          |setgid from setuid
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX

--- Comment #4 from Damien Miller <djm at mindrot.org> 2011-06-03 10:41:24 EST ---
I don't think there is much point to getting rid of the setuid bit on
ssh-keysign. There are only 12 lines of code executed before dropping
privileges and these are clearly quite safe.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.