Secure SSH agent on Mac OS X

README.md

1. Copy pkill to ~/bin.
2. Copy cz.jirutka.SecureSSHAgent.plist to ~/Library/LaunchAgents and replace USERNAME with your system username.
3. Run launchctl load ~/Library/LaunchAgents/cz.jirutka.SecureSSHAgent.plist

See http://www.dribin.org/dave/blog/archives/2007/11/28/securing_ssh_agent/ for more information.

cz.jirutka.SecureSSHAgent.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>cz.jirutka.SecureSSHAgent</string>
    <key>ProgramArguments</key>
    <array>
        <string>/bin/sh</string>
        <string>/Users/USERNAME/bin/pkill</string>
        <string>ssh-agent</string>
    </array>
    <key>StartInterval</key>
    <integer>60</integer>
</dict>
</plist>

pkill

#!/bin/sh

for pid in `ps acx | grep -i $1 | awk {'print $1'}`; do
    kill $pid;
done