Subject: setuid ssh
To: Curt Sampson <cjs@netbsd.org>
From: Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>
List: tech-security
Date: 10/17/2000 23:42:41
  by mail.netbsd.org with SMTP; 18 Oct 2000 01:20:19 -0000
	by wombat.cs.rmit.edu.au (8.9.3/8.9.3/cshub) id MAA10287
	for tech-security@netbsd.org; Wed, 18 Oct 2000 12:20:16 +1100 (EST)
Approved: eat-raw-chocolate
  by mail.netbsd.org with SMTP; 17 Oct 2000 21:40:09 -0000
	by rfhs8012.fh-regensburg.de (8.10.1/8.10.1) with ESMTP id e9HLdFG17555;
	Tue, 17 Oct 2000 23:39:15 +0200 (MET DST)
Date: Tue, 17 Oct 2000 23:42:41 +0200 (MET DST)
From: Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>
To: Curt Sampson <cjs@netbsd.org>
cc: tech-security@netbsd.org
Subject: setuid ssh
In-Reply-To: <200010171558.SAA14218@netbsd.hut.fi>
Message-ID: <Pine.GSO.4.21.0010172342220.29711-100000@rfhpc8320.fh-regensburg.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Tue, 17 Oct 2000, Curt Sampson wrote:
> Modified Files:
> 	basesrc/usr.bin/ssh/ssh: Makefile
> 
> Log Message:
> Do not install /usr/bin/ssh suid, as this can cause various security problems.

which ones?


 - Hubert

-- 
Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>