diff options
| author |   markus <markus@openbsd.org> | 2002-08-12 10:46:35 +0000 |
|---|---|---|
| committer | markus <markus@openbsd.org> | 2002-08-12 10:46:35 +0000 |
| commit | d45fe334a81e6b83a0320725101cac7fd5598881 (patch) | |
| tree | b59a610db3cc3eb1c04d2244b644dbd077d2cd30 | |
| parent | Regen (diff) | |
| download | wireguard-openbsd-d45fe334a81e6b83a0320725101cac7fd5598881.tar.xz wireguard-openbsd-d45fe334a81e6b83a0320725101cac7fd5598881.zip | |
make ssh-agent setgid, disallow ptrace.
| -rw-r--r-- | usr.bin/ssh/ssh-agent.c | 6 | ||||
| -rw-r--r-- | usr.bin/ssh/ssh-agent/Makefile | 5 |
2 files changed, 8 insertions, 3 deletions
diff --git a/usr.bin/ssh/ssh-agent.c b/usr.bin/ssh/ssh-agent.c index 6ed21746446..48d7ce2e413 100644 --- a/usr.bin/ssh/ssh-agent.c +++ b/usr.bin/ssh/ssh-agent.c @@ -35,7 +35,7 @@ #include "includes.h" #include <sys/queue.h> -RCSID("$OpenBSD: ssh-agent.c,v 1.98 2002/07/21 18:07:45 stevesk Exp $"); +RCSID("$OpenBSD: ssh-agent.c,v 1.99 2002/08/12 10:46:35 markus Exp $"); #include <openssl/evp.h> #include <openssl/md5.h> @@ -934,6 +934,10 @@ main(int ac, char **av) pid_t pid; char pidstrbuf[1 + 3 * sizeof pid]; + /* drop */ + setegid(getgid()); + setgid(getgid()); + SSLeay_add_all_algorithms(); while ((ch = getopt(ac, av, "cdksa:")) != -1) { diff --git a/usr.bin/ssh/ssh-agent/Makefile b/usr.bin/ssh/ssh-agent/Makefile index c252dbdad65..05ae43fcc8b 100644 --- a/usr.bin/ssh/ssh-agent/Makefile +++ b/usr.bin/ssh/ssh-agent/Makefile @@ -1,11 +1,12 @@ -# $OpenBSD: Makefile,v 1.21 2001/06/27 19:29:16 markus Exp $ +# $OpenBSD: Makefile,v 1.22 2002/08/12 10:46:35 markus Exp $ .PATH: ${.CURDIR}/.. PROG= ssh-agent BINOWN= root +BINGRP= _sshagnt -BINMODE?=555 +BINMODE?=2555 BINDIR= /usr/bin MAN= ssh-agent.1 |