summaryrefslogtreecommitdiff
path: root/ssh-agent.1
diff options
context:
space:
mode:
authorColin Watson <cjwatson@debian.org>2014-02-09 16:10:13 +0000
committerColin Watson <cjwatson@debian.org>2015-08-19 16:33:33 +0100
commit101d1dd7f95d75f1862c541a5b8d4032d4623d53 (patch)
tree38d7dc0b1caa5b7e9927fab9611f3fae6474220f /ssh-agent.1
parentc679bacbff13edaa44255c4f4c32ef5bc0f4ccbc (diff)
Document consequences of ssh-agent being setgid in ssh-agent(1)
Bug-Debian: http://bugs.debian.org/711623 Forwarded: no Last-Update: 2013-06-08 Patch-Name: ssh-agent-setgid.patch
Diffstat (limited to 'ssh-agent.1')
-rw-r--r--ssh-agent.115
1 files changed, 15 insertions, 0 deletions
diff --git a/ssh-agent.1 b/ssh-agent.1
index 6759afec3..25de326b4 100644
--- a/ssh-agent.1
+++ b/ssh-agent.1
@@ -181,6 +181,21 @@ environment variable holds the agent's process ID.
181.Pp 181.Pp
182The agent exits automatically when the command given on the command 182The agent exits automatically when the command given on the command
183line terminates. 183line terminates.
184.Pp
185In Debian,
186.Nm
187is installed with the set-group-id bit set, to prevent
188.Xr ptrace 2
189attacks retrieving private key material.
190This has the side-effect of causing the run-time linker to remove certain
191environment variables which might have security implications for set-id
192programs, including
193.Ev LD_PRELOAD ,
194.Ev LD_LIBRARY_PATH ,
195and
196.Ev TMPDIR .
197If you need to set any of these environment variables, you will need to do
198so in the program executed by ssh-agent.
184.Sh FILES 199.Sh FILES
185.Bl -tag -width Ds 200.Bl -tag -width Ds
186.It Pa $TMPDIR/ssh-XXXXXXXXXX/agent.\*(Ltppid\*(Gt 201.It Pa $TMPDIR/ssh-XXXXXXXXXX/agent.\*(Ltppid\*(Gt