[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#211334: Option to have ssh client installed setuid root



Package: ssh
Version: 3.4p1-1.1

It would be nice if there was a debconf entry for setting the ssh client
to be setuid root. This is required for hostbased authentication, and it
is annoying to remember this detail when there is an upgrade for ssh
(like the recent security patch).

>From http://www.openssh.org/faq.html#2.2 :

[For] hostbased authentication (in protocol version 2) the ssh client
needs to access the private host key in order to authenticate the client
machine to the server. So the setuid root bit is needed for these
authentication methods, too. You can safely remove the setuid bit from
the ssh executable if you don't want to use these authentication
methods.

Thanks, and great work btw,
Peter Harvey.







Reply to: