Bug in OpenSSH 2.2.0p1

Martin.Luig at telekom.de Martin.Luig at telekom.de
Thu Oct 12 01:00:40 EST 2000


In line 542 of entropy.c is the owner of the PRNG seedfile checked. Root is
also a valid owner of this file. 
So the line must be: 
	if (((st.st_mode & 0177) != 0) || !( (st.st_uid == original_uid) || (st.st_uid == 0) ) )

Regards,

Martin
---
Martin Luig
email:   email at Martin-Luig.de







More information about the openssh-unix-dev mailing list