Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 04 Jul 2002 16:16:34 +0200
From:      Matthias Andree <matthias.andree@gmx.de>
To:        freebsd-stable@freebsd.org
Subject:   Re: HEADS UP: FreeBSD-STABLE now has OpenSSH 3.4p1
Message-ID:  <m3r8ij60jh.fsf@merlin.emma.line.org>
In-Reply-To: <xzpd6u42utq.fsf@flood.ping.uio.no> (Dag-Erling Smorgrav's message of "04 Jul 2002 02:36:01 %2B0200")
References:  <xzpd6u42utq.fsf@flood.ping.uio.no>

next in thread | previous in thread | raw e-mail | index | archive | help
Dag-Erling Smorgrav <des@ofug.org> writes:

> I finished the upgrade a little over an hour ago, and my post-commit
> buildworld just completed.  It should now be safe to upgrade.
>
> Privilege separation is turned off by default, because it breaks
> Kerberos ticket passing.  If you don't use ticket passing, or don't
> know what Kerberos is, it should be safe to turn privilege separation
> on in /etc/ssh/sshd_config (after make world and mergemaster, of
> course.)

Might it be useful to add a parameter to make.conf to choose whether you
want to pass Kerberos tickets or Privilege Separation?

-- 
Matthias Andree

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?m3r8ij60jh.fsf>