Hi, the attached patch fixes <https://fedorahosted.org/sssd/ticket/1687>.
Honza -- Jan Cholasta
>From 6ee131a63425d71b54cca052421dc7368b3e56d9 Mon Sep 17 00:00:00 2001 From: Jan Cholasta <[email protected]> Date: Thu, 22 Nov 2012 18:04:30 +0100 Subject: [PATCH] SSH: Reject requests for authorized keys of root https://fedorahosted.org/sssd/ticket/1687 --- src/responder/ssh/sshsrv_cmd.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/responder/ssh/sshsrv_cmd.c b/src/responder/ssh/sshsrv_cmd.c index 7de523f..687e888 100644 --- a/src/responder/ssh/sshsrv_cmd.c +++ b/src/responder/ssh/sshsrv_cmd.c @@ -65,6 +65,11 @@ sss_ssh_cmd_get_user_pubkeys(struct cli_ctx *cctx) ("Requesting SSH user public keys for [%s] from [%s]\n", cmd_ctx->name, cmd_ctx->domname ? cmd_ctx->domname : "<ALL>")); + if (strcmp(cmd_ctx->name, "root") == 0) { + ret = ENOENT; + goto done; + } + if (cmd_ctx->domname) { cmd_ctx->domain = responder_get_domain(cmd_ctx, cctx->rctx, cmd_ctx->domname); -- 1.8.0.1
_______________________________________________ sssd-devel mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
