Subject: setuid ssh
To: Curt Sampson <cjs@netbsd.org>
From: Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>
List: tech-security
Date: 10/17/2000 23:42:41
  by mail.netbsd.org with SMTP; 17 Oct 2000 21:40:09 -0000
	by rfhs8012.fh-regensburg.de (8.10.1/8.10.1) with ESMTP id e9HLdFG17555;
	Tue, 17 Oct 2000 23:39:15 +0200 (MET DST)
Date: Tue, 17 Oct 2000 23:42:41 +0200 (MET DST)
From: Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>
To: Curt Sampson <cjs@netbsd.org>
cc: tech-security@netbsd.org
Subject: setuid ssh
In-Reply-To: <200010171558.SAA14218@netbsd.hut.fi>
Message-ID: <Pine.GSO.4.21.0010172342220.29711-100000@rfhpc8320.fh-regensburg.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Tue, 17 Oct 2000, Curt Sampson wrote:
> Modified Files:
> 	basesrc/usr.bin/ssh/ssh: Makefile
> 
> Log Message:
> Do not install /usr/bin/ssh suid, as this can cause various security problems.

which ones?


 - Hubert

-- 
Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>