Re: Leveraging pam_env to steal DSA keys

0
53

Posted by Peter van Dijk on May 30

– lilo.conf commonly has whitespace around '=', pam_env does not tolerate that
– bind configs don't even use '=' and are often indented, pam_env does not tolerate indents
– RSA appears to be uninteresting in that the amount of bits we can lift is not sufficient to make an attack feasible
(this is in the article!)
– the DSA host key certainly is a target

If I understand correctly, Debian (and, I presume, Ubuntu) put this…

Source: Re: Leveraging pam_env to steal DSA keys