OpenForum RSS: ��̣�� OpenSSH ssh-agent

��̣�� OpenSSH ssh-agent (��)

Mon, 24 Jul 2023 08:46:16 GMT

�� , �� ssh-agent, �� .

��̣�� OpenSSH ssh-agent (��_��)

Sun, 23 Jul 2023 22:12:03 GMT

https://cvsweb.openbsd.org/src/usr.bin/ssh/ssh-agent.c?rev=1.299&content-type=text/x-cvsweb-markup#DEFAULT_#:~:text=define%20DEFAULT_ALLOWED_PROVIDERS

��̣�� OpenSSH ssh-agent (�� ..)

Sun, 23 Jul 2023 11:29:30 GMT

� �� - �� ssh �� OpenBSD:

$ grep -iE "agent|forward" /etc/ssh/ssh_config
# ForwardAgent no
# ForwardX11 no

� ��, �� , �� :

$ man ssh_config
**
ForwardAgent
Specifies whether the connection to the authentication agent (if
any) will be forwarded to the remote machine. The argument may
be yes, no (the default), an explicit path to an agent socket or
the name of an environment variable (beginning with `$') in which
to find the path.

Agent forwarding should be enabled with caution. Users with the
ability to bypass file permissions on the remote host (for the
agent's Unix-domain socket) can access the local agent through
the forwarded connection. An attacker cannot obtain key material
from the agent, however they can perform operations on the keys
that

��̣�� OpenSSH ssh-agent (��)

Sun, 23 Jul 2023 08:00:04 GMT

�� .
�� 48-�� (��?).
�� last login
�� , �� .

��̣�� OpenSSH ssh-agent (��)

Sun, 23 Jul 2023 07:49:33 GMT

��
ssh -a ...

��̣�� OpenSSH ssh-agent (n00by)

Sun, 23 Jul 2023 05:36:32 GMT

�� OpenBSD, � � �� "��" �� , �� ݣ ��: �� , �� , �� , �� "��".

��̣�� OpenSSH ssh-agent (pavlinux)

Sat, 22 Jul 2023 22:24:24 GMT

> sym = dlsym(lib, "keklol");

� �� ݣ �� "�� dlopen() � dlclose()"

��, �� ݣ ��.

Although this seems safe at first (because every shared library in /usr/lib* comes
from an official distribution package, and no operation besides dlopen() and dlclose()
is generally performed by ssh-agent on a shared library), many shared libraries have
unfortunate side effects when dlopen()ed and dlclose()d, and are therefore unsafe
to be loaded and unloaded in a security-sensitive program such as ssh-agent.
For example, many shared libraries have constructor and destructor functions that
are automatically executed by dlopen() and dlclose(), respectively.

�� , �� ssh-agent �� dlopen() � dlclose()

��̣�� OpenSSH ssh-agent (��)

Sat, 22 Jul 2023 20:38:14 GMT

> �� ))
> # date
> Fri Jul 21 10:46:40 MSK 2023

commit d578a19e2cd312ef0ec842c9f16f97d66caea22a
Author: Ed Maste <emaste@FreeBSD.org>
Date: Wed Jul 19 13:02:33 2023 -0400
...
Fix CVE-2023-38408 - a condition where specific libaries loaded via
ssh-agent(1)'s PKCS#11 support

��̣�� OpenSSH ssh-agent (yason)

Sat, 22 Jul 2023 18:45:09 GMT

��, �� OpenBSD OpenSSH �� /usr/local/lib, �� ף� ��-�� ? �� . � /usr/lib/ �� , �� .

OpenForum RSS: ���̣��� ��������������� ���������� � OpenSSH ssh-agent

���̣��� ��������������� ���������� � OpenSSH ssh-agent (������)

���̣��� ��������������� ���������� � OpenSSH ssh-agent (����_�����)

���̣��� ��������������� ���������� � OpenSSH ssh-agent (�������� ����..)

���̣��� ��������������� ���������� � OpenSSH ssh-agent (������)

���̣��� ��������������� ���������� � OpenSSH ssh-agent (������)

���̣��� ��������������� ���������� � OpenSSH ssh-agent (n00by)

���̣��� ��������������� ���������� � OpenSSH ssh-agent (pavlinux)

���̣��� ��������������� ���������� � OpenSSH ssh-agent (������)

���̣��� ��������������� ���������� � OpenSSH ssh-agent (yason)

OpenForum RSS: ��̣�� OpenSSH ssh-agent

��̣�� OpenSSH ssh-agent (��)

��̣�� OpenSSH ssh-agent (��_��)

��̣�� OpenSSH ssh-agent (�� ..)

��̣�� OpenSSH ssh-agent (��)

��̣�� OpenSSH ssh-agent (��)

��̣�� OpenSSH ssh-agent (n00by)

��̣�� OpenSSH ssh-agent (pavlinux)

��̣�� OpenSSH ssh-agent (��)

��̣�� OpenSSH ssh-agent (yason)