[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#573325: openssh-client: ssh-agent strips LD_LIBRARY_PATH from user profile in X sessions



Package: openssh-client
Version: 1:5.3p1-3
Severity: normal

ssh-agent as launched by /etc/X11/Xsession.d/90x11-common_ssh-agent is the parent of every user process in an X session
however, ssh-agent is suid root and thus removes LD_LIBRARY_PATH from its environment
as a result, setting LD_LIBRARY_PATH in your environement does not work for X sessions

The second approach where ssh-agent generate  shell commands should be used instead.
With this approach it is not the father of other processes anymore.

Best regards,
Julien

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-2-686 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openssh-client depends on:
ii  adduser                3.112             add and remove users and groups
ii  debconf [debconf-2.0]  1.5.28            Debian configuration management sy
ii  dpkg                   1.15.5.6          Debian package management system
ii  libc6                  2.10.2-6          Embedded GNU C Library: Shared lib
ii  libedit2               2.11-20080614-1   BSD editline and history libraries
ii  libgssapi-krb5-2       1.8+dfsg~alpha1-7 MIT Kerberos runtime libraries - k
ii  libssl0.9.8            0.9.8m-2          SSL shared libraries
ii  passwd                 1:4.1.4.2-1       change and administer password and
ii  zlib1g                 1:1.2.3.4.dfsg-3  compression library - runtime

Versions of packages openssh-client recommends:
ii  openssh-blacklist             0.4.1      list of default blacklisted OpenSS
ii  openssh-blacklist-extra       0.4.1      list of non-default blacklisted Op
ii  xauth                         1:1.0.4-1  X authentication utility

Versions of packages openssh-client suggests:
pn  keychain                      <none>     (no description available)
pn  libpam-ssh                    <none>     (no description available)
pn  ssh-askpass                   <none>     (no description available)

-- no debconf information



Reply to: