From owner-freebsd-stable Fri Jul 5 15:31:20 2002 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D096137B400 for ; Fri, 5 Jul 2002 15:31:16 -0700 (PDT) Received: from mailer.cia-g.com (mailer.cia-g.com [65.100.115.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5817743E09 for ; Fri, 5 Jul 2002 15:31:16 -0700 (PDT) (envelope-from raz@cygnus.cia-g.com) Received: from cygnus.cia-g.com (data.cia-g.com [65.100.119.165]) by mailer.cia-g.com (Postfix) with ESMTP id ACCA6345C; Fri, 5 Jul 2002 16:48:58 -0600 (MDT) Received: from raz by cygnus.cia-g.com with local (Exim 3.12 #1 (Debian)) id 17Qbba-0001yQ-00; Fri, 05 Jul 2002 16:31:10 -0600 Date: Fri, 5 Jul 2002 16:31:10 -0600 From: David Wilk To: Dag-Erling Smorgrav Cc: stable@freebsd.org Subject: Re: HEADS UP: FreeBSD-STABLE now has OpenSSH 3.4p1 Message-ID: <20020705163110.D5117@cygnus.wks.Gallup.cia-g.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from des@ofug.org on Thu, Jul 04, 2002 at 02:36:01AM +0200 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG DES, sorry if this is the 100th time you've been asked, but does this mean the commit to RELENG_4_6 is forthcoming or not. I don't mind waiting for it in RELENG_4_6 before the big make world on my pre-production box. thanks, Dave On Thu, Jul 04, 2002 at 02:36:01AM +0200 or thereabouts, Dag-Erling Smorgrav wrote: > I finished the upgrade a little over an hour ago, and my post-commit > buildworld just completed. It should now be safe to upgrade. > > Privilege separation is turned off by default, because it breaks > Kerberos ticket passing. If you don't use ticket passing, or don't > know what Kerberos is, it should be safe to turn privilege separation > on in /etc/ssh/sshd_config (after make world and mergemaster, of > course.) > > Please stay alert for any signs of ssh (particularly sshd) trouble, or > unexpected changes in OpenSSH's behaviour, including unexpected > changes in configuration defaults. > > DES > -- > Dag-Erling Smorgrav - des@ofug.org > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message -- ******************************* David Wilk System Administrator Community Internet Access, Inc. admin@cia-g.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message