1 files changed, 15 insertions, 0 deletions
diff --git a/ssh-agent.1 b/ssh-agent.1
index bb801c902..d370531bb 100644
--- a/ssh-agent.1
+++ b/ssh-agent.1
@@ -182,6 +182,21 @@ environment variable holds the agent's process ID.
 .Pp
 The agent exits automatically when the command given on the command
 line terminates.
+.Pp
+In Debian,
+.Nm
+is installed with the set-group-id bit set, to prevent
+.Xr ptrace 2
+attacks retrieving private key material.
+This has the side-effect of causing the run-time linker to remove certain
+environment variables which might have security implications for set-id
+programs, including
+.Ev LD_PRELOAD ,
+.Ev LD_LIBRARY_PATH ,
+and
+.Ev TMPDIR .
+If you need to set any of these environment variables, you will need to do
+so in the program executed by ssh-agent.
 .Sh FILES
 .Bl -tag -width Ds
 .It Pa ~/.ssh/identity

diff --git a/ssh-agent.1 b/ssh-agent.1 index bb801c902..d370531bb 100644 --- a/ssh-agent.1 +++ b/ssh-agent.1
@@ -182,6 +182,21 @@ environment variable holds the agent's process ID.
182	.Pp	182	.Pp
183	The agent exits automatically when the command given on the command	183	The agent exits automatically when the command given on the command
184	line terminates.	184	line terminates.
		185	.Pp
		186	In Debian,
		187	.Nm
		188	is installed with the set-group-id bit set, to prevent
		189	.Xr ptrace 2
		190	attacks retrieving private key material.
		191	This has the side-effect of causing the run-time linker to remove certain
		192	environment variables which might have security implications for set-id
		193	programs, including
		194	.Ev LD_PRELOAD ,
		195	.Ev LD_LIBRARY_PATH ,
		196	and
		197	.Ev TMPDIR .
		198	If you need to set any of these environment variables, you will need to do
		199	so in the program executed by ssh-agent.
185	.Sh FILES	200	.Sh FILES
186	.Bl -tag -width Ds	201	.Bl -tag -width Ds
187	.It Pa ~/.ssh/identity	202	.It Pa ~/.ssh/identity