vulnerability with ssh-agent

Peter Stuge stuge-openssh-unix-dev at cdy.org
Mon Jul 19 04:26:42 EST 2004


On Sun, Jul 18, 2004 at 06:44:55PM +0200, Keld Jørn Simonsen wrote:
> Yes, that was true, and I installed gnome-ssh-askpass and set the
> shell variable. Then it worked. But, but. I would like that it was
> not ssh that initiated this verification, instead it should be
> ssh-agent.

It is. When ssh asks ssh-agent for the key, ssh-agent asks the user
for permission.


//Peter




More information about the openssh-unix-dev mailing list