Bug in OpenSSH 2.2.0p1

Damien Miller djm at mindrot.org
Sat Oct 14 12:46:39 EST 2000


On Wed, 11 Oct 2000 Martin.Luig at telekom.de wrote:

> In line 542 of entropy.c is the owner of the PRNG seedfile checked. Root is
> also a valid owner of this file. 
> So the line must be: 
> 	if (((st.st_mode & 0177) != 0) || !( (st.st_uid == original_uid) || (st.st_uid == 0) ) )

Under what conditions was the original test failing?

-d

-- 
| ``The power of accurate observation is  | Damien Miller <djm at mindrot.org>
| commonly called cynicism by those who   | @Work <djm at ibs.com.au>
| have not got it'' - George Bernard Shaw | http://www.mindrot.org






More information about the openssh-unix-dev mailing list