OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Andrey A. Chernov (achenagual.pp.ru)
Date: Tue Aug 14 2001 - 19:21:46 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I plan to commit this for proper OPIE+SSH integration (without bothering
    people using SSH to add unneded -f key). This is completely in insecure
    style of other OPIE heuristics sensing DISPLAY and TERM, this is not
    supposed to be secure, only to help people with warnings.

    --- insecure.c.bak Tue Apr 11 16:52:01 2000
    +++ insecure.c Wed Aug 15 04:11:21 2001
    -64,6 +64,8
       if (result != -1)
         return result;
     
    + if (getenv("SSH_CLIENT") != NULL)
    + return (result = 0);
       display_name = (char *) getenv("DISPLAY");
       term_name = (char *) getenv("TERM");
      

    -- 
Andrey A. Chernov
http://ache.pp.ru/

    To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message