vulnerability with ssh-agent

[joshua stein]

> One commenter said that this has big holes. An intruder with root
> privileges could set SSH_AUTH_SOCKET to at socket for ssh-agent found in
> /tmp, and he could also find the keys in the /proc area for the
> ssh-agent.

if you have "an intruder with root privileges", you have bigger
problems

> Could there be done something to better these vulnerabilities?

don't forward your agent to untrusted machines