Update ssh-agent permissions (#1296724)
* It is no longer required to have ssh-agent with suid bit, because the ptrace attach is prevented using PR_SET_DUMPABLE 0 [1] [1] https://anongit.mindrot.org/openssh.git/commit/?id=6c4914afccb0c188a2c412d12dfb1b73e362e07e
This commit is contained in:
parent
7c5d0a686c
commit
f26cd8d6ee
@ -740,7 +740,7 @@ getent passwd sshd >/dev/null || \
|
||||
%attr(0644,root,root) %{_mandir}/man1/slogin.1*
|
||||
%attr(0644,root,root) %{_mandir}/man5/ssh_config.5*
|
||||
%if ! %{rescue}
|
||||
%attr(2111,root,nobody) %{_bindir}/ssh-agent
|
||||
%attr(0755,root,root) %{_bindir}/ssh-agent
|
||||
%attr(0755,root,root) %{_bindir}/ssh-add
|
||||
%attr(0755,root,root) %{_bindir}/ssh-keyscan
|
||||
%attr(0755,root,root) %{_bindir}/sftp
|
||||
|
Loading…
Reference in New Issue
Block a user