similar to: [Bug 1247] ssh-agent prevents use of filesystem permissions to control access to agent socket

https://bugzilla.mindrot.org/show_bug.cgi?id=1247 --- Comment #2 from Matthew Miller <mattdm at mattdm.org> 2011-05-19 23:47:28 EST --- Created attachment 2046 --> https://bugzilla.mindrot.org/attachment.cgi?id=2046 Alternate but incredibly similar patch implementing option as -U The only advantage of my patch I can see is that I also patched the man page. :) I'd like to see some

https://bugzilla.mindrot.org/show_bug.cgi?id=1247 Sascha Silbe <sascha-openssh-bugs at silbe.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sascha-openssh-bugs at silbe.o | |rg -- You are

http://bugzilla.mindrot.org/show_bug.cgi?id=1247 Summary: ssh-agent prevents use of group permissions to control access to agent socket Product: Portable OpenSSH Version: 4.4p1 Platform: ix86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ssh-agent

Hi everyone. I have a system where I'd like to give certain users time-limited access to the use of certain SSH private keys without actually exposing the keys. I have the idea of using ssh-agent to do this. The agent would run as a "keyholder" user, and group permissions on the UNIX-domain socket would allow read-write by both that account and the actual ssh user. Right now,

https://bugzilla.mindrot.org/show_bug.cgi?id=1288 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |djm at mindrot.org Status|NEW |RESOLVED Resolution|

https://bugzilla.mindrot.org/show_bug.cgi?id=1288 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #5 from Damien Miller <djm at mindrot.org> 2011-01-24 12:33:43 EST --- Move resolved bugs

Yup, verified those options are *not* set in 7.2. For a quick test I simply removed them from /usr/lib/systemd/system/NetworkManager.service, did a systemctl daemon-reload, restarted NetworkManager, logged back in as root, and was able to whack /home (7.3). On Tue, Dec 20, 2016 at 11:07 AM, Matthew Miller <mattdm at mattdm.org> wrote: > On Fri, Dec 16, 2016 at 02:29:28PM -0500, Jonathan

Hello vychytraly, On Thu, 27 Jul 2017 22:02:18 +0200 "vychytraly ." <vychytraly at gmail.com> wrote: > Did you already try current Centos? If yes what was the problem? Why it did > not work? It is as simple as unknown hardware at boot up, it's a well known issue w/ *Lake hardware (modern hardware) that kernel 3.x cannot handle. CentOS7 has a kernel which is simply not

Hello, this may be a stupid question, but I'll ask anyways because I was unable to get a satisfying answer somwhere else. So feel free to simply point out my stupidity, if the problem lies only there. The question: If I start an ssh-agent, it creates a socket (/tmp/ssh-*/agent.*), with the socket's and the directory's permissions set to 600. However, if I now connect to a remote

Did you already try current Centos? If yes what was the problem? Why it did not work? On Thu, Jul 27, 2017 at 9:59 PM, Matthew Miller <mattdm at mattdm.org> wrote: > On Thu, Jul 27, 2017 at 08:38:14PM +0200, wwp wrote: > > Say, instead of stable, something not rawhide. But I'll examine all > > options that do work, so let's forget about "stable". > >

On Tue, 23 Jun 2015, poma wrote: > On 23.06.2015 01:27, Adam Williamson wrote: >>> https://kojipkgs.fedoraproject.org/work/tasks/6196/10176196/ >>> Fedora-Live-Xfce-x86_64-rawhide-20150621.iso >>> are broken at early boot stage - isolinux. > This hardening crap certainly breaking it It actuallly looks from Adam's investigation that this isn't different for

> src: > devhelp-0.9.2-2.4.6.src.rpm > mozilla-1.7.10-1.4.1.centos4.src.rpm The mozilla src.rpm is there, but the devhelp one seems to be missing from the mirrors.... -- Matthew Miller mattdm at mattdm.org <http://www.mattdm.org/> Boston University Linux ------> <http://linux.bu.edu/> Current office temperature: 76 degrees

I looked on several mirrors, and nowhere seems to have it. -- Matthew Miller mattdm at mattdm.org <http://mattdm.org/> Boston University Linux ------> <http://linux.bu.edu/>

Hello Matthew, On Thu, 27 Jul 2017 14:27:47 -0400 Matthew Miller <mattdm at mattdm.org> wrote: > On Thu, Jul 27, 2017 at 07:25:25PM +0200, wwp wrote: > > I've just got a Dell XPS 15 (9590) at work and need to set up a stable > > GNU/Linux system on it. I thought of CentOS7, but.. obviously its > > kernel can't run on this hardware. > > What sense of

Recent updates to gdk-pixbuf and gtk2 have the binary rpms in the updates tree, but not the src.rpms. I know we can just get those from Red Hat, but it's nicer if we've got a coherent, self-contained distribution here.... -- Matthew Miller mattdm at mattdm.org <http://mattdm.org/> Boston University Linux ------> <http://linux.bu.edu/>

The recently released update to ImageMagick (6.0.7.1-14.x86_64) has a problem on x86_64 -- it's missing /usr/bin/animate, /usr/bin/display, and /usr/bin/import. The previous ImageMagick-6.0.7.1-12.x86_64.rpm is fine... -- Matthew Miller mattdm at mattdm.org <http://mattdm.org/> Boston University Linux ------> <http://linux.bu.edu/>

On Mon, Apr 27, 2015 at 1:47 PM, Matthew Miller <mattdm at mattdm.org> wrote: > On Mon, Apr 27, 2015 at 11:58:08AM -0500, Les Mikesell wrote: >> Is there an 'after the fact' way to find what yum groups are >> installed, including ones that were added with 'yum groupinstall' >> instead of the initial anaconda install? > > Yes. "yum

Hello Matthew, On Thu, 27 Jul 2017 15:59:35 -0400 Matthew Miller <mattdm at mattdm.org> wrote: > On Thu, Jul 27, 2017 at 08:38:14PM +0200, wwp wrote: > > Say, instead of stable, something not rawhide. But I'll examine all > > options that do work, so let's forget about "stable". > > In that case ? and I freely admit I have some bias here ? I

Maybe CentOS 7.4 would have backported compatibility for your hardware. I had similar issues with Intel GPU not being recognized, which was solved by "i915 preliminary hw support enabled" method. Try to have a look on that. On Thu, Jul 27, 2017 at 10:24 PM, wwp <subscript at free.fr> wrote: > Hello Matthew, > > > On Thu, 27 Jul 2017 15:59:35 -0400 Matthew Miller

http://bugzilla.mindrot.org/show_bug.cgi?id=1208 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED AssignedTo|bitbucket at mindrot.org |djm at mindrot.org --- Comment #17 from Damien