Skip to main content
Unix & Linux

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

8
  • I guess there is security issue here. If one gets access to the root privilege and is a bad person, he could still all my ssh-agent keys :-( Commented Mar 30, 2018 at 15:12
  • 1
    @SebMa I think that root user can use the private keys but not still them. From the man page: The agent will never send a private key over its request channel. Instead, operations that require a private key will be performed by the agent, and the result will be returned to the requester. Commented Mar 30, 2018 at 16:16
  • @OrtomalaLokni You are absolutely right, that was a typo, I meant use instead of still :) Commented Mar 30, 2018 at 17:58
  • 2
    @SebMa If a malicious person gets root access, then your SSH keys are the least of your problems. Commented Apr 22, 2018 at 9:26
  • 1
    @SebMa A root user could use your agent without the file, it's really easy to figure out where the control socket is. I'm just pointing out that if you don't trust root, then you have bigger problems than keeping your SSH keys secure. Commented Apr 23, 2018 at 10:06