Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: authentication method shell variable? |
|---|---|
| Date: | Mon, 28 Aug 2006 10:52:26 -0400 |
On Sun, Aug 27, 2006 at 07:28:06AM -0400, Jaqui Greenlees wrote:
In a recent discussion about secure ssh use the idea of having ssh export the authentication method as a shll variable. The idea being to limit su access to only those who have used a public / private key pair for authentication.
Anyone who was aware of this method of "authenticating" su could just manually set the environment variable to the right value, and then could use su. This method does not provide any practical measure of additional protection from undesired users using su, even if it were possible... What you really need is a PAM module to make su use RSA auth directly, or something like that. -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0x81CFE75D
pgpPY0ZTGLeFR.pgp
Description: PGP signature
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: authentication method shell variable?, Atro Tossavainen |
|---|---|
| Next by Date: | Re: authentication method shell variable?, Jaqui Greenlees |
| Previous by Thread: | Re: authentication method shell variable?, Atro Tossavainen |
| Next by Thread: | Re: authentication method shell variable?, Benjamin Donnachie |
| Indexes: | [Date] [Thread] [Top] [All Lists] |