vulnerability with ssh-agent
Peter Stuge
stuge-openssh-unix-dev at cdy.org
Mon Jul 19 04:26:42 EST 2004
On Sun, Jul 18, 2004 at 06:44:55PM +0200, Keld Jørn Simonsen wrote:
> Yes, that was true, and I installed gnome-ssh-askpass and set the
> shell variable. Then it worked. But, but. I would like that it was
> not ssh that initiated this verification, instead it should be
> ssh-agent.
It is. When ssh asks ssh-agent for the key, ssh-agent asks the user
for permission.
//Peter
More information about the openssh-unix-dev
mailing list