[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SSH stuff... (from slashdot)



On Tue, Jun 25, 2002 at 08:34:12AM -0400, Matthew Daubenspeck wrote:
> Is this true?
> 
> -----Forward----
> The privilege separation code in OpenSSH 3.3 does not work with 2.2 Linux
> kernels.

Yes, but only if you enable compression. Turn that off ('Compression no'
in /etc/ssh/sshd_config) and I'm told it works.

> If you do have kernel 2.4, you should read README.privsep in the openssh
> source distro, since you need to create a special directory and user/group
> for this (which also bit me in the butt...even if sshd had worked on 2.2,
> when I restarted it remotely, it didn't come back up because it didn't have
> that user...yeah, yeah, rtfm. :) )

You don't have to do this manually with the Debian security update.

-- 
Colin Watson                                  [cjwatson@flatline.org.uk]


-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: