https://bugzilla.mindrot.org/show_bug.cgi?id=1893
Damien Miller <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] Summary|change ssh-keisign to |change ssh-keysign to |setgid from setuid |setgid from setuid Status|NEW |RESOLVED Resolution| |WONTFIX --- Comment #4 from Damien Miller <[email protected]> 2011-06-03 10:41:24 EST --- I don't think there is much point to getting rid of the setuid bit on ssh-keysign. There are only 12 lines of code executed before dropping privileges and these are clearly quite safe. -- Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching the assignee of the bug. You are watching someone on the CC list of the bug. _______________________________________________ openssh-bugs mailing list [email protected] https://lists.mindrot.org/mailman/listinfo/openssh-bugs
