From owner-freebsd-questions@FreeBSD.ORG Mon Jan 24 21:23:53 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 044E516A4CE for ; Mon, 24 Jan 2005 21:23:53 +0000 (GMT) Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.192]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8799543D4C for ; Mon, 24 Jan 2005 21:23:52 +0000 (GMT) (envelope-from nocmonkey@gmail.com) Received: by rproxy.gmail.com with SMTP id r35so8218rna for ; Mon, 24 Jan 2005 13:23:52 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=WDKHWZd2CU24uL2IZwCiG1UO7p6JayAkVHSanWYlBMVV5/l36N6ioqTGTwynNb4G7BSMkMAxkEjS9Q6ZBk3sp1INi+Dgt0TJ1gbdSFOmo8fMhpgj19xuXPwRC/HvBlWpg+JApojtwjOq32ThkCfGSYOBi49VfLnA9aScncIK+Vw= Received: by 10.38.72.21 with SMTP id u21mr42535rna; Mon, 24 Jan 2005 13:23:51 -0800 (PST) Received: by 10.38.22.74 with HTTP; Mon, 24 Jan 2005 13:23:51 -0800 (PST) Message-ID: Date: Mon, 24 Jan 2005 16:23:51 -0500 From: Danny To: Hexren In-Reply-To: <12318458361.20050124221023@hexren.net> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: <20050124210109.GA14171@SDF.LONESTAR.ORG> <12318458361.20050124221023@hexren.net> cc: freebsd-questions@freebsd.org Subject: Re: sshd port number ? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Danny List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Jan 2005 21:23:53 -0000 On Mon, 24 Jan 2005 22:10:23 +0100, Hexren wrote: > If ssh ever goes down, a user could start his own compromised > version of ssh and do some nasty stuff. The same user could not do > that if the connecting side would expect sshd to be on a privileged > port because the system ensures that only procs running with superuser > privileges can bind to a privileged port. At the OS level (not the SSHD config for example), where can one configure what proc is assigned to what privileged port? I just did some quick searching, but does this documentation exist on the FreeBSD site? Thank you, ...D