Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Jun 2002 00:09:53 -0600
From:      Brett Glass <brett@lariat.org>
To:        Andrew McNaughton <andrew@scoop.co.nz>
Cc:        security@FreeBSD.ORG
Subject:   Re: Workarounds for OpenSSH problems
Message-ID:  <4.3.2.7.2.20020625000559.00dcb2c0@localhost>
In-Reply-To: <20020625175531.F58819-100000@a2>
References:  <4.3.2.7.2.20020624231924.00db8360@localhost>

next in thread | previous in thread | raw e-mail | index | archive | help
At 12:02 AM 6/25/2002, Andrew McNaughton wrote:

>I've installed it.  It griped and wouldn't start without `mkdir
>/var/empty`.  Having added that it's running, but it hasn't griped about
>the lack of an 'sshd' user/group.  I added them anyway.  I don't see any
>sign of an sshd process running as anything other than root though.
>Compression is enabled when I connect, but I'm not sure that the privilege
>separation is actually working.

I'd be inclined to think it wasn't. Did you make with -D OPENSSH_OVERWRITE_BASE
so that it overwrote the old implementation? (You might still be running the
old one.)

>`make package` on one machine, and then install from the package on the
>others.  It's somewhat dependent on keeping your machines versions in
>sync, but then its also a strategy which makes it easier tokeep everythin
>in sync.

I've got to deal with machines running several versions. Some of which are
old enough that they might not be supported by the latest port.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.2.20020625000559.00dcb2c0>