search for: delete_ssk_auth_socket

Displaying 1 result from an estimated 1 matches for "delete_ssk_auth_socket".

2004 Jul 13
10
vulnerability with ssh-agent
...could also find the keys in the /proc area for the ssh-agent. Is that true? Are the keys visible under Linux in the /proc memory mapping for ssh-agent? Could there be done something to better these vulnerabilities? I was thinking along the lines of deleting the socket in temp, if an option "delete_ssk_auth_socket" was given in config, and then only processes that inherited the socket via fork() would have access to the socket, via an open file descriptor. An intruder would then need to program opening of an inode that was deleted, which is much harder than just using readily available ssh with an easy-...