Re: Public key authentication troubles

From: Darren Tucker (dtucker_at_dodgy.net.au)
Date: 05/31/04 

Date: Mon, 31 May 2004 05:48:02 +0000 (UTC)

In article <c936cd$1m3$1@news-reader1.wanadoo.fr>,
Nicolas Bertolotti <nbertolo@chez.com> wrote:
[about file/dir permissions and public-key authentication]
>Yes, but then, the owner of the .ssh folder and the .ssh/authorized_keys
>file would not be "victim" anymore and, as far as I remember, sshd wouldn't
>accept the key in this case.

Some systems permit "file giveways" (ie unprivileged users chown'ing files
to another users). Much fun can be had with this feature in combination
with file system quotas. 

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.