Bugtraq mailing list archives

Re: Fix for ssh-1.2.27 symlink/bind problem


From: vix () CYBER EE (Toomas Kiisk)
Date: Tue, 5 Oct 1999 22:08:00 +0300


-----BEGIN PGP SIGNED MESSAGE-----

On Mon, 4 Oct 1999, Eivind Eklund wrote:

On Sat, Oct 02, 1999 at 06:38:46PM -0400, Scott Gifford wrote:
I've put together a patch that lets ssh work around the OS bug that
allows bind to follow symlinks.

There isn't general consensus that this is an OS bug.  We (as in
FreeBSD) have installed a workaround consisting of blocking symlink
following for the case, but we have not yet decided if we should make
this permanent.


Look at bind(2) definition of latest Single UNIX spec, and pay
special attention to errno values (ELOOP is there).

In my opinion, ssh is clearly the buggy party here; not following
symlinks in the OS is just a workaround to avoid buggy programs
causing problems.

Right.

- --

vix

http://home.cyber.ee/vix/pubkey.asc

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBN/pMl3lRrtGcyfHdAQF+LwP9E4D42xJMWxvZtJ/D7BIfdN+okohM98Gj
I5L/+UYfIC3LztjHmAKQbjTIQPkGLcPrmhokRL9bwc32DdEb9cqHsSaqe77GNVEH
S485ouIfIIai84bOfQlvVbcdZ0eSktfEHRGNErN1vPxJ06fe/MOzgjmkGKi1mM30
xJRCEe9rRWg=
=NE4F
-----END PGP SIGNATURE-----


Current thread: