Mailing List Archive: scp as user -> user ends up as root ?

scp as user -> user ends up as root ?

marc.fournier at acadiau

Mar 20, 2000, 7:13 AM

Post #1 of 7 (1227 views)

Is the following a known "bug", fixed in newer releases, or something new?

Thanks ...

From sysA:

hermes:/tmp> scp LOG sais@iceberg:/tmp/LOG.test
LOG 100% |*****************************| 138
00:00 ETA
hermes:/tmp> id
uid=113(edenauto) gid=680(edndev)
hermes:/tmp>

To sysB:

iceberg:/tmp> ls -lt LOG*
-rw-r--r-- 1 root centre 138 Mar 20 11:11 LOG.test
-rw-r--r-- 1 root other 138 Mar 20 01:30 LOG
iceberg:/tmp>

hermes:/tmp> ssh -v
SSH Version OpenSSH-1.2.1, protocol version 1.5.
Compiled with SSL.

Marc G. Fournier marc.fournier@acadiau.ca
Senior Systems Administrator Acadia University

"These are my opinions, which are not necessarily shared by my employer"

Re: scp as user -> user ends up as root ? [ In reply to ]

Mar 21, 2000, 10:39 PM

Post #2 of 7 (1230 views)

On Mon, 20 Mar 2000, Marc G. Fournier wrote:

>
> Is the following a known "bug", fixed in newer releases, or something new?

What are the permissions on your scp binary?

-d

--
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm@mindrot.org (home) -or- djm@ibs.com.au (work)

Re: scp as user -> user ends up as root ? [ In reply to ]

marc.fournier at acadiau

Mar 22, 2000, 5:18 AM

Post #3 of 7 (1224 views)

hermes:/home/centre/marc> ls -lt `which scp`
-r-sr-xr-x 1 root other 23288 Jan 18 13:21 /usr/slocal/bin/scp

On Wed, 22 Mar 2000, Damien Miller wrote:

> On Mon, 20 Mar 2000, Marc G. Fournier wrote:
>
> >
> > Is the following a known "bug", fixed in newer releases, or something new?
>
> What are the permissions on your scp binary?
>
> -d
>
>
> --
> | "Bombay is 250ms from New York in the new world order" - Alan Cox
> | Damien Miller - http://www.mindrot.org/
> | Email: djm@mindrot.org (home) -or- djm@ibs.com.au (work)
>
>
>
>

Marc G. Fournier marc.fournier@acadiau.ca
Senior Systems Administrator Acadia University

"These are my opinions, which are not necessarily shared by my employer"

Re: scp as user -> user ends up as root ? [ In reply to ]

markus.friedl at informatik

Mar 22, 2000, 6:42 AM

Post #4 of 7 (1218 views)

> -r-sr-xr-x 1 root other 23288 Jan 18 13:21 /usr/slocal/bin/scp

only the 'ssh' binary needs a s-bit.

Re: scp as user -> user ends up as root ? [ In reply to ]

marc.fournier at acadiau

Mar 22, 2000, 9:02 AM

Post #5 of 7 (1213 views)

so, do we have a problem with install? I know I haven't modified anything
from the simple 'make install' ..

On Wed, 22 Mar 2000, Markus Friedl wrote:

> > -r-sr-xr-x 1 root other 23288 Jan 18 13:21 /usr/slocal/bin/scp
>
> only the 'ssh' binary needs a s-bit.
>

Marc G. Fournier marc.fournier@acadiau.ca
Senior Systems Administrator Acadia University

"These are my opinions, which are not necessarily shared by my employer"

Re: scp as user -> user ends up as root ? [ In reply to ]

Mar 22, 2000, 1:13 PM

Post #6 of 7 (1212 views)

On Wed, 22 Mar 2000, Marc G. Fournier wrote:

> hermes:/home/centre/marc> ls -lt `which scp`
> -r-sr-xr-x 1 root other 23288 Jan 18 13:21 /usr/slocal/bin/scp

scp should _not_ be setuid. Did "make install" install it as such?

-d

--
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm@mindrot.org (home) -or- djm@ibs.com.au (work)

Re: scp as user -> user ends up as root ? [ In reply to ]

marc.fournier at acadiau

Mar 23, 2000, 4:55 AM

Post #7 of 7 (1216 views)

On Thu, 23 Mar 2000, Damien Miller wrote:

> On Wed, 22 Mar 2000, Marc G. Fournier wrote:
>
> > hermes:/home/centre/marc> ls -lt `which scp`
> > -r-sr-xr-x 1 root other 23288 Jan 18 13:21 /usr/slocal/bin/scp
>
> scp should _not_ be setuid. Did "make install" install it as such?

its been awhile, but I don't recall having done it manually :( it is
entirely possible that I did, just not sure why I would ...