Re: [cobalt-security] upgrade open ssh on raq4 - privsep problem

["Jelmer Jellema" <cobalt@xxxxxxxxxxxxxxx>]

Hi Marcus,

> I did not uninstall the pkgmaster version of ssh 3.1 which I have now
> noticed does not install to the default location but to a cobalt one.
> Can anyone tell me what to do now?
> - should i remove the old ssh using the uninstall script that it comes
with
> or is there an easier way??

Well, you could. But then maybe some startupscripts in /etc/rc.d/init.d will
stop working?

I compiled ssh with
./configure --prefix=/usr --sysconfdir=/etc/ssh --with-pam

(and with an option to change the user used for privsep, but never mind).

this way, when make and make install have done their work, the pkgmaster
version will be overwritten.

By the way: it seems the cobalt was not very vulnerable after all, mail
coming up.

Jelmer