Re: DSA-134-1

[Oystein Viggen <oysteivi@tihlde.org>]

* [Moritz Schulte] 

> As a side note: many network daemons could make use of this special
> feature to be more secure.

Off the top of my head, I can think of telnetd, popd and imapd.

For ssh, you would need to support public key authentication in the
passwd server, and ftp will have to deal with the old "have to open port
20 on the fly" problem.

So privsep will still be useful on the Hurd, with the only improvement
being that you don't really need the sshd user.

Oystein
-- 
When in doubt: Recompile.


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org