Re: Net::SSH::Perl security question



Joe wrote:
We have a need to allow users to submit a job through a web server
(front end machine) to run on back end cluster machines. I made use of
Net::SSH::Perl in a CGI program to realize this. One thing I notice
is that the CGI program requires a "/.ssh/known_hosts2" at the top
path of the file system on the front end machine where Apache is
running. I wonder does this potentially compromise any security on the
system? Need expert advice ...

Nothing to do with perl, however, the answer to your question is "No."

For more details, read the documentation for ssh:

man ssh

or discuss in a security/ssh related newsgroup.

Also, the CGI program doesn't require it, SSH is what uses/creates it.
Furthermore, the directory should be under the username running
the Apache process, not under root ( '/' ).
.



Relevant Pages

  • Re: Cant tell if I have been hacked :(
    ... the problem was that the file system suddenly looked messed up? ... The only recorded successful FC4 ssh break-in on a system I built ... showed up as tens of thousands of random ssh log-in failures within an ... five unsuccessful user tries from an ip, and lists the intruder in hosts.deny ...
    (Fedora)
  • ssh file transfer error
    ... When I click ok the error message show that it can't connect to server with ... In more detail, If I delete .ssh folder in home directory, I can mount ssh ... When I remount again the ssh file system can ... I can use ssh command line to connect to ssh server and invoke any command ...
    (Debian-User)
  • Re: Samba limited to 32767 dirs?
    ... > Which operating system and file system? ... > filesystem limit, there may be some mkfs and mount activity in your ... I did not try to ssh to the box and create dirs. ...
    (comp.unix.bsd.freebsd.misc)
  • Re: delete a file that found on different machine
    ... > The file system is not mounted. ... > I want to know if there is a command similar to 'ssh' that allow to ... or maybe I can use the 'ftp' command someway. ...
    (comp.unix.programmer)