Re: #76788: forced ssh agent/X forwarding vulnerability

2000-11-16 Thread Wichert Akkerman
FWIW, I backported the patch already and an advisory should appear later today. Wichert. -- _ / Nothing is fool-proof to a sufficiently talented fool \ | [EMAIL PROTECTED] http://www.liacs.nl/~wichert/

Re: #76788: forced ssh agent/X forwarding vulnerability

2000-11-16 Thread Wichert Akkerman
FWIW, I backported the patch already and an advisory should appear later today. Wichert. -- _ / Nothing is fool-proof to a sufficiently talented fool \ | [EMAIL PROTECTED] http://www.liacs.nl/~wichert

Re: restricted bash (rbash)

2000-11-16 Thread Ethan Benson
On Thu, Nov 16, 2000 at 09:02:33AM -0200, Pedro Zorzenon Neto wrote: > I forgot one thing about all this... > > All about the restricted bash could be useless if you forget to > lock the ftp acount of the restricted users. > > You can avoid them to edit and create shell scripts inside their

Re: restricted bash (rbash)

2000-11-16 Thread Pedro Zorzenon Neto
I forgot one thing about all this... All about the restricted bash could be useless if you forget to lock the ftp acount of the restricted users. You can avoid them to edit and create shell scripts inside their telnet session, but if you forget to lock their ftp session ... they could p

Re: openssh configuration

2000-11-16 Thread Ethan Benson
On Thu, Nov 16, 2000 at 03:20:24PM +0800, Lincoln Leung wrote: > > hi, > > i've just installed openssh-2.3.0p1 on my Debian 2.2 but failed to login > using users' passwords. Password authentication failed all the time and it > prompted "Permission Denied" on the command line. a message, "Failed >

Re: openssh configuration

2000-11-16 Thread Petr Cech
On Thu, Nov 16, 2000 at 03:20:24PM +0800 , Lincoln Leung wrote: > > hi, > > i've just installed openssh-2.3.0p1 on my Debian 2.2 but failed to login > using users' passwords. Password authentication failed all the time and it > prompted "Permission Denied" on the command line. a message, "Failed

Re: restricted bash (rbash)

2000-11-16 Thread Ethan Benson
On Thu, Nov 16, 2000 at 09:02:33AM -0200, Pedro Zorzenon Neto wrote: > I forgot one thing about all this... > > All about the restricted bash could be useless if you forget to > lock the ftp acount of the restricted users. > > You can avoid them to edit and create shell scripts inside thei

Re: restricted bash (rbash)

2000-11-16 Thread Pedro Zorzenon Neto
I forgot one thing about all this... All about the restricted bash could be useless if you forget to lock the ftp acount of the restricted users. You can avoid them to edit and create shell scripts inside their telnet session, but if you forget to lock their ftp session ... they could

Re: openssh configuration

2000-11-16 Thread Ethan Benson
On Thu, Nov 16, 2000 at 03:20:24PM +0800, Lincoln Leung wrote: > > hi, > > i've just installed openssh-2.3.0p1 on my Debian 2.2 but failed to login > using users' passwords. Password authentication failed all the time and it > prompted "Permission Denied" on the command line. a message, "Failed

Re: openssh configuration

2000-11-16 Thread Petr Cech
On Thu, Nov 16, 2000 at 03:20:24PM +0800 , Lincoln Leung wrote: > > hi, > > i've just installed openssh-2.3.0p1 on my Debian 2.2 but failed to login > using users' passwords. Password authentication failed all the time and it > prompted "Permission Denied" on the command line. a message, "Failed

openssh configuration

2000-11-16 Thread Lincoln Leung
hi, i've just installed openssh-2.3.0p1 on my Debian 2.2 but failed to login using users' passwords. Password authentication failed all the time and it prompted "Permission Denied" on the command line. a message, "Failed password for [user] from .." was logged in auth.log. but i'm sure the pa

Re: restricted bash (rbash)

2000-11-16 Thread Jochen Striepe
Hi, On 15 Nov 2000, Peter Cordes <[EMAIL PROTECTED]> wrote: > > > Jochen, > > > > mkdir /usr/local/bin/restricted;ln -s > > /usr/local/bin/restricted/;... > > > > export PATH=/usr/local/bin/restricted;exec rbash > > > > ...boom. Now only the commands you want the user to be able to ru