Re: ssh-copy-id

On Fri, Feb 28, 2014 at 06:08:10PM -0500, Eitan Adler wrote:
> On 28 February 2014 17:15, Mark Felder <feld@freebsd.org> wrote:
> ....

> > In my opinion, if I'm using an ssh utility and I specify "-i" flag it
> > should be the private key.

> Hey all,

> Sorry about the confusion ssh-copy-id has caused you.

> Does the following patch help ?

In addition to that, it may be useful to add an explicit check against
sending private keys. Even though printf(1) fails, the receiving server
still gets the private key and a malicious root user might steal it.

For example, any key starting with '-' is inappropriate.

-- 
Jilles Tjoelker
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"