F-SECURE /usr/local/sbin/sshd

From: all mail refused (elvis_at_notatla.org.uk)
Date: 12/17/03

  • Next message: ian maclure: "Re: no password ssh to accounts sharing NFS'd HOME" 
    Date: 17 Dec 2003 21:32:03 GMT

    What's the correct filemode for this binary ? I searched the web.
    I've seen one installed as -rws--x--x root sys and I hope that's a mistake.
    It's version 1.3.6, not that it probably matters.

    This has obvious problems with the command-line arguments which include
    the selection of config file:

        umask 0 && /usr/local/sbin/sshd -f /somewhere/my_sshd_config -p 2222 -q

    and stuff in that config file gets used including the creation of the
    PidFile of your choice as root, mode 0666. Or the obliteration of some
    formerly-sensible file.

    Also CAN-2001-0144 mentions F-SECURE sharing some problems with other SSH
    implementations - no big surprise given the common code origins. What's
    the truth of the assertion that they do not suffer from the September 2003
    problems ? Any test results available either way ? 

    -- 
Elvis Notargiacomo                  http://www.sendacow.org.uk/homepage.html
  • Next message: ian maclure: "Re: no password ssh to accounts sharing NFS'd HOME"