zlib compression, the exploit, and OpenSSH

[Niels Provos]

On Wed, Mar 13, 2002 at 02:11:29PM -0800, ewheeler at kaico.com wrote:
>   Do you know when the changes listed at
> http://www.citi.umich.edu/u/provos/ssh/privsep.html will be merged into
> the OpenSSH tree, or if they ever will (or, I suppose, already have
> been)?  I have not looked yet, but is there documention on setting up
> privilege separation?
My hope is that the privilege separation will be integrated into the
official OpenSSH tree.  Currently, if you download the version from
my webpage, privilege separation is enabled by default.  It can be
disabled with 'UsePrivilegeSeparation=no'.

Most OpenSSH features are already supported.  Markus and I are working
on getting the few remaining things straightend out.

Niels.