From owner-freebsd-security Tue Nov 16 8:27:35 1999 Delivered-To: freebsd-security@freebsd.org Received: from frosty.purefusion.com (core.fedz.org [216.94.188.115]) by hub.freebsd.org (Postfix) with ESMTP id 19B3314E11 for ; Tue, 16 Nov 1999 08:27:15 -0800 (PST) (envelope-from relapz@purefusion.com) Received: from localhost (relapz@localhost) by frosty.purefusion.com (8.9.3/8.9.3) with ESMTP id LAA01307 for ; Tue, 16 Nov 1999 11:27:12 -0500 (EST) Date: Tue, 16 Nov 1999 11:27:11 -0500 (EST) From: relapz To: freebsd-security@FreeBSD.ORG Subject: Re: Fwd: ssh-1.2.27 remote buffer overflow - exploitable (VD#7) In-Reply-To: <199911160357.UAA01885@harmony.village.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org seeing as we are on the OpenSSH/ssh front, i've decided to ditch ssh in favour of OpenSSH. However, I seem to be getting some odd errors when someone connects to the new OpenSSH server daemon: Nov 16 11:18:35 <4.4> frosty sshd[1146]: set class 'default' resource limit datasize: Operation not permitted Nov 16 11:18:35 <4.4> frosty sshd[1146]: set class 'default' resource limit stacksize: Operation not permitted Nov 16 11:18:35 <4.4> frosty sshd[1146]: set class 'default' resource limit maxproc: Operation not permitted Nov 16 11:18:35 <4.4> frosty sshd[1146]: set class 'default' resource limit openfiles: Operation not permitted Can someone shed some light on what exactly causes these? Should i be worried about a misconfig or is this normal. thanx, DJM:> On Mon, 15 Nov 1999, Warner Losh wrote: > In message <4.1.19991114000355.04d7f230@granite.sentex.ca> Mike Tancsa writes: > : Is there a patch to this ? Or is openssh the way to go ? > > Damn. I had a patch before taking off for the weekend, but didn't > have time to commit it. I'll commit it in a little bit if no one has > done so already. > > Warner > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message