LINUX.IE, website of the Irish Linux Users' Group
Tux rules!

   
Home
New Users
Articles
Download
Projects
Community
Vendors

  Print Version
Email to...
 
Archives:


planetILUG

Recent News

News Archive


Join the
ILUG
on FaceBook


Join the
ILUG
on LinkedIn


Join the
ILUG SETI
Group



















 
 :: Mailing Lists

[ILUG] openssh vulnerability

[ILUG] openssh vulnerability

John Madden maddenj at skynet.ie
Tue Jun 25 12:19:19 IST 2002


On (25/06/02 12:01), Anders Holm didst pronounce:
> 
> [snip]
> >
> > It's not a work-around if you're running 2.2 kernels, as many people
> > still are. I'm running a pair of heavily modded RH 6.2 machines, with
> > upgraded kernels and all public services upgraded to latest.
> 
> Apparently John Madden was successful in this. Maybe one would ask him how
> he did this? Might even be worth the effort, who knows?
> 
I followed the steps someone else posted this morning:

add deb http://security.debian.org/ testing/updates main contrib non-free
to /etc/apt/sources.list. apt-get install ssh then added:
UsePrivilegeSeparation	yes
Compression 		no

to /etc/ssh/sshd_config

Only problem I've come across so far is that most of the users have ssh1
keys generated for accessing mail on another server in the network and
3.3 doesn't seem to support it (at least that's what I think the problem
is, not having looked too deeply into it yet). Other than that, no
upsets yet.

-- 
Chat ya later,

John.
--
BOFH excuse #78: Yes, yes, its called a desgin limitation




More information about the ILUG mailing list
Read this without the formatting.
                                                                                                    

 

Hosted by HEAnet


Maintained by the ILUG website team. The aim of Linux.ie is to support and help commercial and private users of Linux in Ireland. You can display ILUG news in your own webpages, read backend information to find out how. Networking services kindly provided by HEAnet, server kindly donated by Dell. Linux is a trademark of Linus Torvalds, used with permission. No penguins were harmed in the production or maintenance of this highly praised website. Looking for the Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
RSS Version
Powered by Dell