[cobalt-security] upgrade open ssh on raq4 - privsep problem

["marcus miller" <cobalt_security_list@xxxxxxxxxxx>]

Hi all,

I have just been trying to upgrade our openssh to version 3.3 to remove the 
possible weakness. ( privsep )

The source comes with a new readme file detailing some steps to be take to 
prepare the 'privsep preauth' environment. - as follows:

# mkdir /var/empty
# chown root:sys /var/empty
# chmod 755 /var/empty
# groupadd sshd
# useradd -g sshd

The last two commands will not work, i can find man pages for them yet 
entering them just gives me:

sh: groupadd: command not found

------------------------------------------------------------------

we have a raq4 and are looking to get this fixed asap, can anyone offer a 
word of advice?

Thanks

MJM

_________________________________________________________________
Join the world?s largest e-mail service with MSN Hotmail. 
http://www.hotmail.com