[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: openssh version info bug or feature ?



On Wed, Feb 06, 2002 at 02:47:39AM +0100, Dominik.Thinay@unix-ag.org wrote:
> today i do a scanssh on my subnet...and i see an ugly thing:
> 
> SSH-2.0-OpenSSH_3.0.2p1 "Debian 1:3.0.2p1-6"
> 			|> I don't want any distribution info's like this !
> there is an easy way to disable it  ?

Nope. The packaging process adds the "Debian 1:3.0.2p1-6"
to a define...

You could recompile the package yourself, and comment out
the if..then..fi after dh_testdir in the build-stamp: target.

This was added in 1:3.0.2p1-5:
(	* Include the Debian version in our identification, to
		make it easier to audit networks for patched versions
		in future)

You could submit a bug report if you think it's wrong...
but it'd be a minor bug, I suspect. Unless you can build
a really good argument why having sshd give away the Debian-ness
of your system is a security hole.

-- 
===========================================================
Paul "TBBle" Hampson, MCSE
4th year CompSci/Asian Studies student, ANU
The Boss, Bubblesworth Pty Ltd (ABN: 51 095 284 361)
Paul.Hampson@Anu.edu.au

Of course Pacman didn't influence us as kids. If it did,
we'd be running around in darkened rooms, popping pills and
listening to repetitive music.

This email is licensed to the recipient for non-commercial
use, duplication and distribution.
===========================================================

Attachment: pgpQ9Vkp7WsYs.pgp
Description: PGP signature


Reply to: