ssh(1)
NAME
cfssh - (somewhat) secure CFS shell
SYNOPSIS
cfssh directory
DESCRIPTION
Arrayname. Once the correct passphrase is provided, cfssh invokes a
new shell with the random directory in /crypt as its working directory. When the shell exits, the temporary attach name is
deleted with cdetach(1). Since the generated names are somewhat
obscure and are hidden from view with CFS's "." mechanism, casual
attackers cannot easily exploit the attached cleartext even if
they can spoof the UID of the user.
SEE ALSO
cfsd(8), cattach(1), cdetach(1), cmkdir(1)
BUGS
- Arrayviewed as an example. A determined attacker could probably guess
the generated name by exploiting the known properties of the way
the ksh random function is seeded.
There's no hiding from an attacker who can compromise root - on the client system while an attach is active.