From owner-freebsd-security@FreeBSD.ORG Wed Sep 17 12:24:36 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B294716A4B3 for ; Wed, 17 Sep 2003 12:24:36 -0700 (PDT) Received: from out005.verizon.net (out005pub.verizon.net [206.46.170.143]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9058443FB1 for ; Wed, 17 Sep 2003 12:24:35 -0700 (PDT) (envelope-from cswiger@mac.com) Received: from mac.com ([68.237.14.199]) by out005.verizon.net (InterMail vM.5.01.05.33 201-253-122-126-133-20030313) with ESMTP id <20030917192434.ESPD15786.out005.verizon.net@mac.com> for ; Wed, 17 Sep 2003 14:24:34 -0500 Message-ID: <3F68B4EF.9050507@mac.com> Date: Wed, 17 Sep 2003 15:24:31 -0400 From: Chuck Swiger Organization: The Courts of Chaos User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 X-Accept-Language: en-us, en MIME-Version: 1.0 References: <200309161817.h8GIH1GL072348@freefall.freebsd.org> <5.0.2.1.1.20030916225106.02e09dc0@popserver.sfu.ca> <1063807011.15698.3.camel@gentoo1.enic.cc> <20030917140107.GD91843@madman.celabo.org> <16232.43602.97364.411009@cnr.cs.columbia.edu> <20030917184232.GE6137@madman.celabo.org> In-Reply-To: <20030917184232.GE6137@madman.celabo.org> X-Enigmail-Version: 0.76.5.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Authentication-Info: Submitted using SMTP AUTH at out005.verizon.net from [68.237.14.199] at Wed, 17 Sep 2003 14:24:34 -0500 cc: security@FreeBSD.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-03:12.openssh X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Sep 2003 19:24:36 -0000 Jacques A. Vidrine wrote: > On Wed, Sep 17, 2003 at 02:39:14PM -0400, Jonathan Lennox wrote: [ ... ] >> On FreeBSD 5.0 and later, wouldn't it be both simpler and safer to >> recommend >> # /etc/rc.d/sshd restart >> instead? This can be dangerous if you are ssh'ed in, and the restart kills your connection rather than the daemon. > Then there would be two sets of instructions, which sucks. > > I think we'll just not do it quite completely and go with > > # kill `cat /var/run/sshd.pid` > # /usr/sbin/sshd This is good. -- -Chuck