Markus Friedl <[EMAIL PROTECTED]> writes: > but shouldn't it do something like > seteuid(getuid()); > setuid(getuid()); > executing ssh-agent?
It should. It currently uses popen(3), which doesn't. It needs popen(3)-like functionality because it reads ssh-agent's output in order to set $SSH_AGENT_PID and $SSH_AUTH_SOCK. Rewriting it to use pipe(2) + fork(2) + execve(2) so it can frob the UID after forking but before exec'ing is possible and desirable but not trivial. I'll see what I can do later this week. In any case, this doesn't seem to be an OpenSSH bug. DES -- Dag-Erling Smorgrav - [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message