5 ms·
Secret materials for ssh keys won’t be in sshd. They stay client side. Granted m, host keys could be compromised, so you could impersonate a server, but a sshd
by upon_drumhead 3y ago
Secret materials for ssh keys won’t be in sshd. They stay client side. Granted m, host keys could be compromised, so you could impersonate a server, but a sshd key leak won’t give direct access
- acdha 3y agoIt could leak passwords, though, unless you’re very certain your overwriting after validation always works.
- tlb 3y agoYes, though it does have the host key which you could use to do a MITM attack.
- rwmj 3y agoMADV_DONTDUMP or MAP_CONCEAL don't appear anywhere in the source, client or server (with the exception of the seccomp filter where they're just used to filter potential system calls).