Package: openssh-server
Severity: wishlist
One would think that a program so highly related to security would
check its arguments better before proceeding to stage II or whatever.
$ /usr/sbin/sshd --help
Could not load host key: /etc/ssh/ssh_host_rsa_key
Could not load host key: /etc/ssh/ssh_host_dsa_key
Anything not understood should trigger a usage message.
Ah, it does check a little:
$ /usr/sbin/sshd -
Extra argument -.
But I note there is no correct documented way of getting a usage
message! One must trigger an error.
$ /usr/sbin/sshd -h
sshd: option requires an argument -- h
OpenSSH_4.7p1 Debian-1, OpenSSL 0.9.8g 19 Oct 2007
usage: sshd [-46Ddeiqt] [-b bits] [-f config_file] [-g login_grace_time]
[-h host_key_file] [-k key_gen_time] [-o option] [-p port] [-u len]
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
