backdoor by authorized_keys2 leftovers
Damien Miller
djm at mindrot.org
Sat May 21 17:00:57 EST 2011
On Thu, 19 May 2011, Jim Knoble wrote:
> While we're at it, Ciphers and MACs use commas for separators. Using
> spaces may prevent placing authorized_keys files in a directory whose
> name contains whitespace.
I think the solution for these is to make strdelim() handle quotes, because
paths with spaces are broken more generally.
IIRC there is already a bug for this if anyone wants to do it.
-d
More information about the openssh-unix-dev
mailing list