Re: ssh setuid und $HOSTALIASES

On Thu, May 16, 2002 at 07:15:03PM +0200, Danijel Tasov wrote:
> Hallo,
>
> Ist es ein Feature oder ein Bug, dass /usr/bin/ssh die
> HOSTALIASES Variable ignoriert, wenn es mode 4755 hat?

Ich kann mir nur vorstellen, daß es Absicht ist.

> danielt(at)uliae:~> cat $HOSTALIASES
> obi oberon.pilgerer.org
> danielt(at)uliae:~> ls -l /usr/bin/ssh
> -rwsr-xr-x 2 root wheel 202460 May 3 15:14 /usr/bin/ssh*
> danielt(at)uliae:~> ssh obi
> ssh: obi: No address associated with hostname
> zsh: exit 255 ssh obi
> danielt(at)uliae:~> SU chmod 0755 /usr/bin/ssh
> danielt(at)uliae:~> ls -l /usr/bin/ssh
> -rwxr-xr-x 2 root wheel 202460 May 3 15:14 /usr/bin/ssh*
> danielt(at)uliae:~> ssh obi
> danielt(at)oberon.pilgerer.org's password: ^C
> danielt(at)uliae:~> SU chmod 4755 /usr/sbin/ssh
> chmod: /usr/sbin/ssh: No such file or directory
> zsh: exit 1 sudo chmod 4755 /usr/sbin/ssh
> danielt(at)uliae:~> SU chmod 4755 /usr/bin/ssh
> # Das ist wieder seltsam
> danielt(at)uliae:~> ls -l /usr/bin/ssh
> -rwsr-xr-x 2 root wheel 202460 May 3 15:14 /usr/bin/ssh*
> danielt(at)uliae:~> gdb
> GNU gdb 4.18
> Copyright 1998 Free Software Foundation, Inc.
> GDB is free software, covered by the GNU General Public License,
> and you are
> welcome to change it and/or distribute copies of it under certain
> conditions.
> Type "show copying" to see the conditions.
> There is absolutely no warranty for GDB. Type "show warranty"
> for details.
> This GDB was configured as "i386-unknown-freebsd".
> (gdb) set args obi
> (gdb) exec ssh
> (gdb) run
> Starting program: /usr/bin/ssh obi
> (no debugging symbols found)...(no debugging symbols found)...
> (no debugging symbols found)...(no debugging symbols found)...
> danielt(at)oberon.pilgerer.org's password: (no debugging symbols
> found)...
> Program received signal SIGINT, Interrupt.
> 0x281e232c in read () from /usr/lib/libc.so.4
> (gdb) quit
> The program is running. Exit anyway? (y or n) y
> danielt(at)uliae:~>

Wäre ja noch schöner, wenn man ein suid root Proggy debuggen könnte...
Das suid bit wird dabei natürlich ignoriert.

-- 
B.Walter              COSMO-Project         http://www.cosmo-project.de
ticso(at)cicely.de         Usergroup           info(at)cosmo-project.de
To Unsubscribe: send mail to majordomo(at)de.FreeBSD.org
with "unsubscribe de-bsd-questions" in the body of the message