Subject: Re: A couple of security-related issues.
To: Richard Rauch <>
From: Manuel Bouyer <>
List: tech-security
Date: 12/28/2000 19:17:17
On Thu, Dec 28, 2000 at 08:04:55AM -0600, Richard Rauch wrote:
> (^&  'Sokay.  But we _should_ have man-pages on them, yes?  Or does
> OpenSSH blow off documentation?  If it's an OpenSSH problem, we probably
> don't need to get too concerned about it (assuming that we get that
> previously-mentioned new ssh implementation by the next release).

Don't know. If it's documented in ssh man page I'd say it's enouth.
an ssh.conf man page could just be a link to the ssh one.

> I would, if I were admining a system for more than just myself.
> For email, I presently find it more convenient to use a remote account.  
> This lets me take my system down for various reasons and arbitrary
> duration with relative impunity.  My crontab is unexciting (just a stock
> daily/weekly pair of events).  The only things that I look for at all in
> root's mail are:
>  *.core files.
>  Package security warnings
> (I skim the rest lightly, but I don't think that I've ever seen anything
> interesting show up, since my system sees very low use.)
> I could see about a disk failure being a concern, I guess.  But it's less
> painful, and probably more useful, to keep relatively current
> backups.  (Not that that invalidates the notion of scanning the mail for
> such problems. does make it less of an issue to catch it.)

Ok, if it's only a workstation I guess it's ok then :)

Manuel Bouyer, LIP6, Universite Paris VI.