2.5.2p2 ssh-keyscan installed group writable?
Christopher Linn
celinn at mtu.edu
Tue Mar 27 23:42:00 EST 2001
On Tue, Mar 27, 2001 at 08:21:12AM +0100, Kevin Steves wrote:
[...]
> and i also wonder why isn't ssh group, other readable:
>
> no)
> AC_MSG_RESULT(no)
> SSHMODE=0711
> ;;
> *) AC_MSG_RESULT(yes)
> SSHMODE=04711
this one *is* intentional ;*)
it is common practice to deny readability to suid binaries, and this
results in no loss of functionality. i *think* this is so users
cannot copy and analyze the binary for e.g. buffer overruns
and the like.
chris
--
Christopher Linn, <celinn at mtu.edu> | By no means shall either the CEC
Staff System Administrator | or MTU be held in any way liable
Center for Experimental Computation | for any opinions or conjecture I
Michigan Technological University | hold to or imply to hold herein.
More information about the openssh-unix-dev
mailing list