Re: setuid for "ssh"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

I understand that it is dangerous to give root permissions, but the issue is
if you want to use RhostsAuthentication then you need to enable privileged
ports for ssh i.e. UsePrivilegedPorts yes in ssh_config, which requires ssh
to setuid root. Actually thats the way it has been written in man ssh_config.
Here is what it says:

RhostsAuthentication
Specifies whether to try rhosts based authentication. Note that
this declaration only affects the client side and has no effect
whatsoever on security. Most servers do not permit RhostsAuthen-
tication because it is not secure (see RhostsRSAAuthentication).
The argument to this keyword must be "yes" or "no". The default
is "no". This option applies to protocol version 1 only and
requires ssh to be setuid root and UsePrivilegedPort to be set to
"yes".

PS: Also, i am enabling this form of Authentication only for my private
network.
-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subjecthttps://www.redhat.com/mailman/listinfo/redhat-list


[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux