Displaying 1 result from an estimated 1 matches for "delete_ssk_auth_socket".
2004 Jul 13
10
vulnerability with ssh-agent
...could also find the keys in the /proc area for the
ssh-agent.
Is that true?
Are the keys visible under Linux in the /proc memory mapping for ssh-agent?
Could there be done something to better these vulnerabilities?
I was thinking along the lines of deleting the socket in temp, if an
option "delete_ssk_auth_socket" was given in config, and then only
processes that inherited the socket via fork() would have access to the
socket, via an open file descriptor. An intruder would then need to
program opening of an inode that was deleted, which is much harder than
just using readily available ssh with an easy-...