diff options
| author | Markus Friedl <markus@cvs.openbsd.org> | 2000-12-12 21:45:22 +0000 |
|---|---|---|
| committer | Markus Friedl <markus@cvs.openbsd.org> | 2000-12-12 21:45:22 +0000 |
| commit | 14fdb4c104378a86a906d6848bf0064b47cc1b82 (patch) | |
| tree | 33b69477c03ff381f7260ce4c24f75a941d19abe | |
| parent | 5aa6478608891171e7dfecd3250a0da6526f5be3 (diff) | |
source port < 1024 is no longer required for rhosts-rsa since it
adds no additional security.
| -rw-r--r-- | usr.bin/ssh/sshd.c | 9 |
1 files changed, 4 insertions, 5 deletions
diff --git a/usr.bin/ssh/sshd.c b/usr.bin/ssh/sshd.c index 91a2dace939..c34b58b7bcd 100644 --- a/usr.bin/ssh/sshd.c +++ b/usr.bin/ssh/sshd.c @@ -40,7 +40,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: sshd.c,v 1.136 2000/12/05 16:47:28 todd Exp $"); +RCSID("$OpenBSD: sshd.c,v 1.137 2000/12/12 21:45:21 markus Exp $"); #include "xmalloc.h" #include "rsa.h" @@ -1105,18 +1105,17 @@ main(int ac, char **av) sshd_exchange_identification(sock_in, sock_out); /* - * Check that the connection comes from a privileged port. Rhosts- - * and Rhosts-RSA-Authentication only make sense from priviledged + * Check that the connection comes from a privileged port. + * Rhosts-Authentication only makes sense from priviledged * programs. Of course, if the intruder has root access on his local * machine, he can connect from any port. So do not use these * authentication methods from machines that you do not trust. */ if (remote_port >= IPPORT_RESERVED || remote_port < IPPORT_RESERVED / 2) { - debug("Rhosts Authentication methods disabled, " + debug("Rhosts Authentication disabled, " "originating port not trusted."); options.rhosts_authentication = 0; - options.rhosts_rsa_authentication = 0; } #ifdef KRB4 if (!packet_connection_is_ipv4() && |