Re: OpenSSH's UseLogin option allows remote access with root privilege.

On Sat, Jun 10, 2000 at 02:54:25PM -0700, Phil Stracchino wrote:
> *** session.c.orig Fri May 19 19:49:31 2000
> --- session.c Fri Jun 9 23:45:28 2000

this is a bad patch, the check for (options.use_login && command
!= NULL) should be compiled into sshd even if USE_PAM is defined.
a correct patch is attached.

moreover, i got some complaints from people who ship OpenSSH and
did not get notified in advance. we don't all who ship OpenSSH,
so please tell me at <markus_at_openssh.com> if you want to get notified
in the future.

<HR NOSHADE>
<UL>
<LI>text/plain attachment: 1_
</UL>
Received on Jun 12 2000