Re: [gentoo-user] ssh-agent

[Mick]

On Tuesday 21 November 2006 18:41, Jorge Almeida wrote:
> On Tue, 21 Nov 2006, Boyd Stephen Smith Jr. wrote:
> >> OK, that's what I thought. But a troian running with the normal user
> >> permissions could get the keys by reading the temporary directory (not
> >> by connecting to the socket). Is this right?
> >
> > No.  There's no files in the temporary directory besides the socket.
> >
> >> Or are the keys protected
> >> in some other way?
> >
> > They are only stored in locked memory; they are never on disk
> > unencrypted. Anyone that can read locked memory can access them, but this
> > is very few users/processes on Linux -- and besides those same users will
> > be able to read the key as you authenticate even if you don't use
> > ssh-agent, as long as they time things right.
>
> OK, this sounds better! I posted to the gnupg-users, asking a similar
> question about gpg-agent. I guess gpg-agent works the same way.

Please post back your findings!

What happens to the /tmp/ directory & socket file after the user logs out?  
Does it get deleted by the ssh-agent shutdown script?

I am asking this because I seem to continuously accumulate a load of gpg-agent 
directories and socket files into my /tmp.  Unless of course gpg-agent works 
on a different principle all together.  My start up & shutdown scripts are 
in /etc/X11/Sessions/fluxbox.  Are they correct for this task?
================================================
eval "$(gpg-agent --daemon)"
/usr/bin/startfluxbox
kill `echo ${GPG_AGENT_INFO} | cut -d ':' -f 2`
================================================

Or should I have another line to 'rm -Rf /tmp/gpg-*'
-- 
Regards,
Mick