Really? Is there any links to what was avoided? I'd like to look at
these in detail before I concede that anything of values has been
demonstrated. I've heard these claims before, but I could not find any
substantiating details---the claims are dubious at best.
--Dean
On Tue, 27 Jan 2004, Damien Miller wrote:
> Dean Anderson wrote:
> > Right. And there is an easy solution: Turn off Privsep. A process that
> > creates new user sessions needs root privileges, and those privileges
> > cannot be given away prematurely to "improve security". Privsep is just a
> > stupid idea for some programs. Probably for most programs...
>
> Privsep has avoided the last two real security problems found in
> portable OpenSSH, and others before that. The security gain has
> already been demonstrated.
>
> -d
>
________________________________________________
Kerberos mailing list [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos
