summaryrefslogtreecommitdiff
path: root/contrib/redhat
diff options
context:
space:
mode:
authorDamien Miller <djm@mindrot.org>2002-10-03 12:08:19 +1000
committerDamien Miller <djm@mindrot.org>2002-10-03 12:08:19 +1000
commit7e659de6f981aaf1059720e5e198aa652834e414 (patch)
tree1d6f12898813669564ddb711bb16816e53e78573 /contrib/redhat
parent510d51300ed4542950534f1fb5ab11899e98d6d8 (diff)
- (djm) Install ssh-agent setgid nobody in contrib/redhat/openssh.spec
Diffstat (limited to 'contrib/redhat')
-rw-r--r--contrib/redhat/openssh.spec5
1 files changed, 4 insertions, 1 deletions
diff --git a/contrib/redhat/openssh.spec b/contrib/redhat/openssh.spec
index 4bd03e82..e7005064 100644
--- a/contrib/redhat/openssh.spec
+++ b/contrib/redhat/openssh.spec
@@ -357,7 +357,7 @@ fi
%attr(-,root,root) %{_bindir}/slogin
%attr(-,root,root) %{_mandir}/man1/slogin.1*
%if ! %{rescue}
-%attr(0755,root,root) %{_bindir}/ssh-agent
+%attr(2755,root,nobody) %{_bindir}/ssh-agent
%attr(0755,root,root) %{_bindir}/ssh-add
%attr(0755,root,root) %{_bindir}/ssh-keyscan
%attr(0755,root,root) %{_bindir}/sftp
@@ -400,6 +400,9 @@ fi
%endif
%changelog
+* Wed Oct 01 2002 Damien Miller <djm@mindrot.org>
+- Install ssh-agent setgid nobody to prevent ptrace() key theft attacks
+
* Mon Sep 30 2002 Damien Miller <djm@mindrot.org>
- Use contrib/ Makefile for building askpass programs