summaryrefslogtreecommitdiff
path: root/ssh-agent.1
diff options
context:
space:
mode:
Diffstat (limited to 'ssh-agent.1')
-rw-r--r--ssh-agent.115
1 files changed, 15 insertions, 0 deletions
diff --git a/ssh-agent.1 b/ssh-agent.1
index fff0db6bc..99e4f6d2e 100644
--- a/ssh-agent.1
+++ b/ssh-agent.1
@@ -201,6 +201,21 @@ socket and stores its pathname in this variable.
201It is accessible only to the current user, 201It is accessible only to the current user,
202but is easily abused by root or another instance of the same user. 202but is easily abused by root or another instance of the same user.
203.El 203.El
204.Pp
205In Debian,
206.Nm
207is installed with the set-group-id bit set, to prevent
208.Xr ptrace 2
209attacks retrieving private key material.
210This has the side-effect of causing the run-time linker to remove certain
211environment variables which might have security implications for set-id
212programs, including
213.Ev LD_PRELOAD ,
214.Ev LD_LIBRARY_PATH ,
215and
216.Ev TMPDIR .
217If you need to set any of these environment variables, you will need to do
218so in the program executed by ssh-agent.
204.Sh FILES 219.Sh FILES
205.Bl -tag -width Ds 220.Bl -tag -width Ds
206.It Pa $TMPDIR/ssh-XXXXXXXXXX/agent.<ppid> 221.It Pa $TMPDIR/ssh-XXXXXXXXXX/agent.<ppid>