sshd UseLogin option

From: Dag-Erling Smorgrav (des@ofug.org)
Date: 03/13/02 

To: security@freebsd.org
From: Dag-Erling Smorgrav <des@ofug.org>
Date: 13 Mar 2002 14:51:40 +0100

Could someone please explain to me why we don't use sshd's UseLogin
option by default? I know that there was a security hole related to
that option recently, but that's not a real reason - security holes
can show up anywhere - so is there anything that makes UseLogin a
particularly bad idea?

DES 

-- 
Dag-Erling Smorgrav - des@ofug.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: sshd UseLogin option
    ... >> Could someone please explain to me why we don't use sshd's UseLogin ... I know that there was a security hole related to ... Nate ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: sshd UseLogin option
    ... > Could someone please explain to me why we don't use sshd's UseLogin ... I know that there was a security hole related to ... Crap! ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: sshd UseLogin option
    ... > Could someone please explain to me why we don't use sshd's UseLogin ... I know that there was a security hole related to ... Who uses system passwords with ssh? ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: sshd UseLogin option
    ... it spake thus: ... >> Could someone please explain to me why we don't use sshd's UseLogin ... I know that there was a security hole related to ... I think that's fixed now - I was able to bounce incoming ssh ...
    (FreeBSD-Security)
  • Re: sshd UseLogin option
    ... I know that there was a security hole related to ... I worry about my child and the Internet all the time, ... Here's what I worry about. ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)