search for: prng_write_seedfile

I'm using OpenSSH 2.3.0p1. When my users use ssh for the first time, using rhosts authentication, entropy.c drops the privs in prng_write_seedfile() at the setuid(original_uid) line (line 550, approx): void prng_write_seedfile(void) { int fd; char seed[1024]; char filename[1024]; struct passwd *pw; /* Don't bother if we have already saved a seed */ if (prng_seed_saved) return; setuid(original_uid); /* ^^^^^^^^^^^^^^^^^^^...

....g., I've heard that 64-bit AIX has 64-bit pid_t in some compilation environments. Here is a patch. 2001-09-28 Paul Eggert <eggert at twinsun.com> * authfile.c (key_perm_ok): Work even if system integer types are 'long', not 'int'. * entropy.c (prng_check_seedfile, prng_write_seedfile, prng_read_seedfile): Likewise. * serverloop.c (server_loop, server_loop2): Likewise. * session.c (session_dump, session_by_pid, session_exit_message, session_close_by_pid, session_have_children, session_close_by_channel): Likewise. * ssh-agent.c, sshd.c (main): Lik...

...1 files changed, 3 insertions(+), 1 deletion(-) diff -uprN openssh-4.3p2/ssh-rand-helper.c openssh-4.3p2-kylie/ssh-rand-helper.c --- openssh-4.3p2/ssh-rand-helper.c 2005-07-17 02:26:44.000000000 -0500 +++ openssh-4.3p2-kylie/ssh-rand-helper.c 2006-05-08 15:22:13.967153672 -0500 @@ -564,7 +564,8 @@ prng_write_seedfile(void) /* Try to ensure that the parent directory is there */ snprintf(filename, sizeof(filename), "%.512s/%s", pw->pw_dir, _PATH_SSH_USER_DIR); - mkdir(filename, 0700); + if (mkdir(filename, 0700) < 0) + fatal("mkdir: %s", strerror(errno)); snprintf(filename...

http://bugzilla.mindrot.org/show_bug.cgi?id=968 djm at mindrot.org changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #760| |ok? Flag| | ------- Additional Comments From djm at mindrot.org 2005-02-16 11:24 -------

...icit declaration of function `getrusage' entropy.c: In function `hash_output_from_command': entropy.c:426: warning: implicit declaration of function `bzero' entropy.c: In function `prng_check_seedfile': entropy.c:532: warning: int format, long int arg (arg 3) entropy.c: In function `prng_write_seedfile': entropy.c:557: warning: int format, long int arg (arg 2) entropy.c: In function `prng_read_seedfile': entropy.c:596: warning: int format, long int arg (arg 2) uidswap.c: In function `temporarily_use_uid': uidswap.c:54: warning: implicit declaration of function `seteuid' ssh.c: In...