[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]
RE: setuid for "ssh"
- From: "Gavin McDonald" <gavitron gmail com>
- To: "'General Red Hat Linux discussion list'" <redhat-list redhat com>
- Subject: RE: setuid for "ssh"
- Date: Thu, 29 Dec 2005 12:50:33 -0800
Further to that, why does one need to run ssh as root from a user's account?
Wouldn't that give the user access to root's ~/.ssh/ directory, and root's
private key? (If one exists) Not to mention, allowing said user to
masquerade as local root to remote systems?
If you are trying to log in as root on a remote system, just try:
$ ssh root remote host com
or a google search for "setuid ssh" returns this in the first few links:
http://www.snailbook.com/faq/trusted-host-howto.auto.html
-G
Regards,
Gavin McDonald
========================
EVI Logistic Enterprises
email: me gavitron com
phone: (604) 313-3845
> -----Original Message-----
> From: redhat-list-bounces redhat com [mailto:redhat-list-
> bounces redhat com] On Behalf Of Sachin Bhugra
> Sent: Thursday, December 29, 2005 12:37 PM
> To: redhat-list redhat com
> Subject: setuid for "ssh"
>
> Hello,
>
> Can anybody pls tell me how to "setuid root" for ssh. I set the suid
> bit for ssh and it looks like:
>
> -rws--x--x 1 root root 217208 Sep 17 2003 /usr/bin/ssh
>
> But the problem is, when i try to use ssh as normal user, then it runs
> with normal user permissions and not with root. Say if i start ssh
> under user account "abc", then ps -Af shows:
>
> abc 1671 1636 0 00:46 pts/2 00:00:00 ssh 192.168.0.10
>
> That means it is starting with the authority of the user and not root.
>
> any ideas??
>
> PS: I am doing this to set RhostsAuthentication with /etc/hosts.equiv,
> on my private network, but cannot get it to work.
>
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request redhat com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]