• Darren Tucker's avatar
    - dtucker@cvs.openbsd.org 2010/03/07 11:57:13 · cd70e1b8
    Darren Tucker authored
         [auth-rhosts.c monitor.c monitor_wrap.c session.c auth-options.c sshd.c]
         Hold authentication debug messages until after successful authentication.
         Fixes an info leak of environment variables specified in authorized_keys,
         reported by Jacob Appelbaum.  ok djm@
    cd70e1b8
auth-rhosts.c 9.01 KB