Re: setgid ssh-agent

2015-04-18 Thread Edho Arief
On Fri, Apr 17, 2015 at 3:58 AM, Károly Arnhoffer wrote: > Hi, > > As I can see OpenSSH's ssh-agent is not setgid as it is for example in all > the Linux distributions I know. > Just for reference, it's also setgid to a dedicated _sshagnt group in openbsd. ___

Re: edit others user crontab, security bug

2016-09-01 Thread Edho Arief
Hi, On Thu, Sep 1, 2016, at 21:47, Andrii Kuzik wrote: > Probably a lot of freebsd servers affected > > Security bug allows to edit other users crontab > > root# pw useradd -n www.promspecbud.com -g nobody -s /bin/sh -d /tmp > root# pw useradd -n www.promspecbud.com.other -g nobody -s /bin/sh -