OpenSSH and HostBasedAuthentication

[Jason Stone]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> > -rws--x--x  1 root  wheel  734964 May 15 19:58 /usr/bin/ssh*
> > ...
> > debug1: ssh_connect: getuid 501 geteuid 501 anon 1
> > ...
> > Darwin montague 1.3.3 Darwin Kernel Version 1.3.3: Fri May  4 13:46:54 
> > PDT 2001; root:xnu/xnu-124.8.obj~1/RELEASE_PPC  Power Macintosh powerpc
> 
> does darwin support setuid root binaries?
> 
> is anyone using openssh on darwin??

I think yes and yes.

[mauve:~] root# uname -a
Darwin mauve 1.3.3 Darwin Kernel Version 1.3.3: Fri May  4 13:46:54 PDT
2001; root:xnu/xnu-124.8.obj~1/RELEASE_PPC  Power Macintosh powerpc

[mauve:~] root# ssh -V
SSH Version OpenSSH_2.3.0p1, protocol versions 1.5/2.0.
Compiled with SSL (0x0090581f).

[mauve:~] root# cat test.c 
#include <stdio.h>
#include <unistd.h>

main(){
        system("id");
        exit(0);
}

[mauve:~] root# ls -l /test
- ---s--x--x  1 root  wheel  9456 May 17 15:30 /test

[mauve:~] root# su - heather

[mauve:~] heather% id
uid=990(heather) gid=990 groups=990, 0(wheel)

[mauve:~] heather% /test 
uid=990(heather) euid=0(root) gid=990 groups=990, 0(wheel)


 -Jason

 ---------------------------
 If the Revolution comes to grief, it will be because you and those you
 lead have become alarmed at your own brutality.         --John Gardner



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: See https://private.idealab.com/public/jason/jason.gpg

iD8DBQE7BFGdswXMWWtptckRAt+XAKDwndtxn8MJQeBcdyAZlfut3IvKEACg6uZR
6VHm2OxC0KvDgwOxqe5wqIg=
=Xswt
-----END PGP SIGNATURE-----