Re: FreeBSD Security Advisory FreeBSD-SA-03:12.openssh

From: Chuck Swiger (cswiger_at_mac.com)
Date: 09/17/03

  • Next message: Sick`: "FW: opiekey segfault ... isn't that harmfull? it's setuid root" 
    Date: Wed, 17 Sep 2003 15:55:51 -0400

    Matthew Dillon wrote:
    [ ... ]
    > :This can be dangerous if you are ssh'ed in, and the restart kills your
    > :connection rather than the daemon.
    >
    > All the restart target does is basically kill the pid using the pid file
    > and then restart the daemon, so it is no more dangerous then the below.

    It's good that the FreeBSD script does not use 'killall' (for instance), but not
    every SysV sshd script is as sensible. Of course, if you argued that a NG sshd
    RC script might involve dependencies which affected other processes, you'd have
    a point. :-) 

    -- 
-Chuck
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Sick`: "FW: opiekey segfault ... isn't that harmfull? it's setuid root"

    Relevant Pages

    • respawning a script from inittab doubts
      ... I am trying to prepare a script which starts a daemon and restarted ... this has the problem that inittab will not restart the daemon if it is ...
      (comp.unix.solaris)
    • Re: sendmail does not accept connections from time to time
      ... > after stopping sendmail with the init script there are still processes ... That's ok, it's not the daemon. ... For restart use kill -HUP $ ...
      (comp.mail.sendmail)
    • Re: Bit Twister: Is this the dhclient-exit-hooks you were talking about?
      ... If you are running the dhclient then all you have to do is ... create the hooks script with YOUR CODE. ... DNS server with my wgets and then restart my firewall. ... You can put an echo statement on commands to show you what will happen ...
      (alt.os.linux)
    • Re: Resetting Serial Sequence Each Month
      ... If it's the order number that needs to restart each month, ... same process as above - either mine if the database is Quit each night (so ... that the script can be run when the database is re-opened the next day), ... (although it depends on how the rest of the database is set-up and how it ...
      (comp.databases.filemaker)
    • Using VBScript to refresh group policy, restart, and log in.
      ... I am writing a script that needs to apply the domain's group policy, ... clearing the legal message text and ... after I restart the account's name goes back to ...
      (microsoft.public.windowsxp.general)