Re: [LUG] OpenSSH Vunrability

[Simon Waters <Simon@xxxxxxxxxxxxxxxxxxxx>]

Theo Zourzouvillys wrote:
> try turning off compression, especially if you're using a 2.2 kernel.
>
> There was some stuff about it in the debian security announcement...
>
> > * compression does not work on all operating systems since the code
> >  relies on specific mmap features
>
> however, solar designer has apparently released a patch for 2.2 kernels -
> dunno where though! ;)
>
> > <doh> - for those catching up privsep has it's own README in the
> > new source tar ball, you have to make an empty chroot jail and
> > user.....yawn.
>
> Make sure you enable PrivelegeSeperation in sshd_config, too ;)

Compression is off by default as well by the looks of it - oh
dear.

I'm off to reread the documentation, such as it is.

--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.