Read-only on /dev/tty causes ssh-add to show passwords when typed and ssh'ing to new hosts to fail

Damien Miller djm at mindrot.org
Sun Jul 20 20:01:42 EST 2014


On Fri, 18 Jul 2014, James Keener wrote:

> When permissions on /dev/tty are crw------- and owner root:root, ssh-add
> will echo passwords to the terminal (sudo does not) and ssh fails with a
> "Host key verification failed." error.

I would expect that ssh can't successfully issue termios calls to turn off
tty echo when /dev/tty isn't writable to the user. sudo will work because
it is setuid root.

There isn't much ssh can do with bad permissions on /dev/tty.

-d


More information about the openssh-unix-dev mailing list