From owner-freebsd-security Wed Jun 26 11:36: 8 2002 Delivered-To: freebsd-security@freebsd.org Received: from smtp.web.de (smtp02.web.de [217.72.192.151]) by hub.freebsd.org (Postfix) with ESMTP id 0CFF037B7DA for ; Wed, 26 Jun 2002 11:30:49 -0700 (PDT) Received: from [80.129.124.89] (helo=floundjan.homeip.net) by smtp.web.de with esmtp (WEB.DE(Exim) 4.70 #5) id 17NHZ1-0000av-00 for freebsd-security@FreeBSD.ORG; Wed, 26 Jun 2002 20:30:47 +0200 Received: from localhost (localhost.lan [127.0.0.1]) by floundjan.homeip.net (Postfix on FreeBSD 4.5) with ESMTP id 330C529D for ; Wed, 26 Jun 2002 20:30:46 +0200 (CEST) Received: from jan-linux.lan (jan-linux.lan [192.168.0.20]) by floundjan.homeip.net (Postfix on FreeBSD 4.5) with ESMTP id EE3B51E1 for ; Wed, 26 Jun 2002 20:30:42 +0200 (CEST) Subject: OpenSSH Security (just a question, please no f-war) From: Jan Lentfer To: FreeBSD Security Mailling List Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Ximian Evolution 1.0.7-1mdk Date: 26 Jun 2002 20:30:41 +0200 Message-Id: <1025116241.2817.2.camel@jan-linux.lan> Mime-Version: 1.0 X-Virus-Scanned: by AMaViS perl-10 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Ok all, i somewhat gave up to follow the OpenSSH conversation on the list. I have ONE question: I am now running 3.3p1 on all my boxes (FreeBSD & Linux) with Privilige Separation enabled. Is this configuration secure for now or not? Do I have to update to 3.4 as soon as it is in ports or can I take a few days until everything has settled and calmed a little? Regards, Jan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message