openssh unix dev - Nov 2002 - [Bug 431] scp could prevent write access to server

http://bugzilla.mindrot.org/show_bug.cgi?id=431





------- Additional Comments From gfernandez at livevault.com  2002-11-08 00:36
-------
Created an attachment (id=174)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=174&action=view)
adds readonly flag to scp

this change applies to scp.c



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=431

rumen at skalasoft.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID



------- Additional Comments From rumen at skalasoft.com  2002-11-08 21:19
-------
What about command: 
$ ssh user at host '( cat > FILE_NAME_ON_REMOTE_HOST )' <
FILE_NAME_ON_LOCAL_HOST
 
this is same as: 
$ scp FILE_NAME_ON_LOCAL_HOST user at host:FILE_NAME_ON_REMOTE_HOST 
 
 



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=431





------- Additional Comments From gfernandez at livevault.com  2002-11-09 00:05
-------
like most security issues, this change would not be sufficient by itself. In my 
setup I've made other changes that make cat unavailable (i.e. by using
chroot
()).



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.