Date: Wed, 15 Aug 2001 04:21:46 +0400 From: "Andrey A. Chernov" <ache@nagual.pp.ru> To: security@freebsd.org, markm@freebsd.org Subject: CFR: OPIE heuristic to detect SSH connection Message-ID: <20010815042144.A5499@nagual.pp.ru>
next in thread | raw e-mail | index | archive | help
I plan to commit this for proper OPIE+SSH integration (without bothering
people using SSH to add unneded -f key). This is completely in insecure
style of other OPIE heuristics sensing DISPLAY and TERM, this is not
supposed to be secure, only to help people with warnings.
--- insecure.c.bak Tue Apr 11 16:52:01 2000
+++ insecure.c Wed Aug 15 04:11:21 2001
@@ -64,6 +64,8 @@
if (result != -1)
return result;
+ if (getenv("SSH_CLIENT") != NULL)
+ return (result = 0);
display_name = (char *) getenv("DISPLAY");
term_name = (char *) getenv("TERM");
--
Andrey A. Chernov
http://ache.pp.ru/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010815042144.A5499>