[Bug 1974] Support for encrypted host keys

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Sat Jul 6 09:25:49 EST 2013


https://bugzilla.mindrot.org/show_bug.cgi?id=1974

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org

--- Comment #8 from Damien Miller <djm at mindrot.org> ---

> 2) however: i don't like the idea of having ssh-keysign
>    run the parser code while running w/ uid 0

At least in this case the configs are root-owned.

>    we should avoid running that much code in a setuid tool...
>    perhaps just disallow ssh-keysign for ssh-agent-setups :)

I don't think we would get many complaints about this :)

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list