Linux

5409 readers

104 users here now

A community for everything relating to the linux operating system

Also check out [email protected]

Original icon base courtesy of [email protected] and The GIMP

founded 1 year ago

MODERATORS

[email protected]

242

'Critical' vulnerability in OpenSSH uncovered, affects almost all Linux systems (www.computing.co.uk)

submitted 5 months ago by [email protected] to c/[email protected]

39 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] -1 points 5 months ago* (last edited 5 months ago) (5 children)

Maybe it is time to move to something new

Also why does sshd run as root. I deal like ssh could use some least privilege

[–] [email protected] 10 points 5 months ago* (last edited 5 months ago) (2 children)

When you log in to an ssh terminal for a shell, it has to launch the shell process as the desired user. Needs to be root to do that.

SSH has been around a long time. It's not perfect, but it's mostly validated. Anything new won't have that history.

[–] [email protected] 1 points 5 months ago (1 children)

Can't it use built in OS mechanisms for that? Surely you could figure out a way to only give it permissions it needs. Maybe break it up into two separate processes.

[–] Sethayy 1 points 5 months ago

That just sounds like root with extra steps (trying to implement OS security policies in a remote terminal utility)

load more comments (2 replies)