Skip to content

Comment on OpenSSH Race condition resulting in potential remote code executionparent

Comments

These days most common use case of ssh is logging in to a remote server you already own with root privileges

I only see this in relatively small and "young" teams. In any bigger organization I've worked in, a new user is created for each person who uses the machine.

I have a script that looks at your github org/team and generates/updates users on-demand then lets you connect.

The script is pretty straightforward, see AuthorizedKeysCommand and https://github.com/{$user}.keys

Certainly, but in my org they're trusted with sudo access (which gets logged to syslog).

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.