Re: [cobalt-security] Significant OpenSSH Vulnerability ??

[grbear@xxxxxxx]

> From: Michael Stauber <cobalt@xxxxxxxxxxxxxx>
> Subject: Re: [cobalt-security] Significant OpenSSH Vulnerability ??
> Date: Tue, 25 Jun 2002 22:06:08 +0200

> Here are my OpenSSH-3.3p1 compile options:
> 
> ./configure --prefix=/usr \
>        --sysconfdir=/etc/ssh \
>        --with-ssl-dir=/opt/openssl-0.9.6d \
>        --with-zlib=/opt/zlib-1.1.4 \
>        --libexecdir=/usr/libexec/openssh \
>        --with-ipv4-default \
>        --with-pam=/lib/security \
>        --with-md5-passwords \
>        --with-default-
> path=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin \
>        --with-privsep-user=nobody \
>        --with-privsep-path=/home/sites

Thank you for contributing your configure options for OpenSSH.

Now that 3.4p1 has been released, can we now safetly leave out the
--with-privsep* options?

Thanks.