Re: openssh-agent polling

On Sun, 16 Sep 2007, Jefferson Ogata wrote:

> if [ -z "$SSH_AUTH_SOCK" ]
> then
> for x in /tmp/ssh*/agent*
> do
> if [ -S "$x" -a -O "$x" ]
> then
> SSH_AUTH_SOCK="$x" ssh-add -l >/dev/null 2>&1
> if [ $? -ne 2 ]; then
> SSH_AUTH_SOCK="$x"
> export SSH_AUTH_SOCK
> break
> fi
> fi
> done
> fi

This might connect you to a hostile ssh-agent that harvests your keys.
Better to set the agent socket location using ssh-agent's -a option to
either a canonical location, or a randomised location in a user-owned
directory.

-d
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
https://lists.mindrot.org/mailman/li...enssh-unix-dev