RE: setuid for "ssh"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Further to that, why does one need to run ssh as root from a user's account?
Wouldn't that give the user access to root's ~/.ssh/ directory, and root's
private key? (If one exists)  Not to mention, allowing said user to
masquerade as local root to remote systems?  

If you are trying to log in as root on a remote system, just try:
$ ssh root@xxxxxxxxxxxxxxx 

or a google search for "setuid ssh" returns this in the first few links:
http://www.snailbook.com/faq/trusted-host-howto.auto.html

-G
 
Regards,

Gavin McDonald
========================
EVI Logistic Enterprises
email: me@xxxxxxxxxxxx
phone: (604) 313-3845



> -----Original Message-----
> From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-
> bounces@xxxxxxxxxx] On Behalf Of Sachin Bhugra
> Sent: Thursday, December 29, 2005 12:37 PM
> To: redhat-list@xxxxxxxxxx
> Subject: setuid for "ssh"
> 
> Hello,
> 
>  Can anybody pls tell me how to "setuid root" for ssh. I set the suid
> bit for ssh and it looks like:
> 
> -rws--x--x 1 root root 217208 Sep 17 2003 /usr/bin/ssh
> 
> But the problem is, when i try to use ssh as normal user, then it runs
> with normal user permissions and not with root. Say if i start ssh
> under user account "abc", then ps -Af shows:
> 
> abc 1671 1636 0 00:46 pts/2 00:00:00 ssh 192.168.0.10
> 
> That means it is starting with the authority of the user and not root.
> 
> any ideas??
> 
> PS: I am doing this to set RhostsAuthentication with /etc/hosts.equiv,
> on my private network, but cannot get it to work.
> 
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list

-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux