On Mon, Dec 08, 2003 at 01:28:20PM +1100, Russell Coker wrote:
> Another problem is that host keys require SUID ssh client in the
> default configuration.

This hasn't been true since OpenSSH 3.3, and therefore since before
woody. See ssh-keysign(8).

openssh (1:3.3p1-0.0woody1) testing-security; urgency=high

  [...]
  * Support setuid ssh-keysign binary instead of setuid ssh client.
  [...]

 -- Daniel Jacobowitz <[EMAIL PROTECTED]>  Mon, 24 Jun 2002 13:43:44 -0400

Cheers,

-- 
Colin Watson                                  [EMAIL PROTECTED]


Reply via email to