Re: Upcoming OpenSSH vulnerability

[Ben Goren <ben@trumpetpower.com>]

On Tue, Jun 25, 2002 at 03:12:27AM -0600, Theo de Raadt wrote:

> > Does it  means that  this bug  can be  exploited when  sshd is
> > running with "PermitRootLogin yes" ?
>
> Maybe yes, maybe no.
>
> Note I've  not answered your  question either way.  So  what are
> you going to do?  Perhaps follow the instructions I sent?

I have.

A  related but  different question:  best practices  dictate using
sudo and  not logging in  as root. Regardless of the  current bug,
are there non-policy reasons to avoid ``PermitRootLogin yes''?

Sincerely,

b&

--
Ben Goren
 mailto:ben@trumpetpower.com
 http://www.trumpetpower.com/
 icbm:33o25'37"N_111o57'32"W

[demime 0.98d removed an attachment of type application/pgp-signature]