scp creating root files

[douglas.manton at uk.ibm.com]

> Is your scp, ssh, or sshd SUID root?

Nope.  All mode 755.

I have noticed that all commands executed via ssh run as root.

    ssh -l me localhost touch test

/home/me $ ls -l test
-rw-r--r--   1 root     system          0 Jun  2 17:18 test


I have also discovered that the problem goes away when UseLogin is set to
"no"!  Changing line 834 in session.c to:

        if (command != NULL || !options.use_login) {

solves the problem for me.


--------------------------------------------------------
 Doug Manton, AT&T EMEA Firewall and Security Solutions

              douglas.manton at uk.ibm.com
--------------------------------------------------------
"If privacy is outlawed, only outlaws will have privacy"