Re: OpenSSH 4.1: call for testing.

Gert Doering wrote:
> NetBSD 2.0.2 on Sparc64 (should find all endianness and word-size issues):
>
> - configure:
>
> WARNING: the operating system that you are using does not
> appear to support either the getpeereid() API nor the
> SO_PEERCRED getsockopt() option. These facilities are used to
> enforce security checks to prevent unauthorised connections to
> ssh-agent. Their absence increases the risk that a malicious
> user can connect to your agent.
>
> out of curiousity: who *does* support this, if not the BSDs? Or is it
> just NetBSD that can't do it yet?

Apparently, there has been an unapplied patch for NetBSD to implement
this since 1.4.2:

http://www.netbsd.org/cgi-bin/query-...l?number=10798

Hopefully someone will clean it up and commit it - it is an important
thing to have.

-d

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://www.mindrot.org/mailman/listi...enssh-unix-dev