sshd audit not happy with ssh1 and scp

Darren Tucker dtucker at zip.com.au
Sun Sep 17 12:02:07 EST 2006


On Sat, Sep 16, 2006 at 09:31:37AM -0400, John Baldwin wrote:
> On Saturday 16 September 2006 05:23, Darren Tucker wrote:
> > Thanks for the report.  FreeBSD is using audit support now?  Is it the
> > debug driver, or are you using OpenBSM or something?
> 
> OpenBSM.  It's now in FreeBSD 6.x and BSM_AUDIT is enabled by default.

Cool.  Out of curiousity, did you have to modify the audit support in
sshd, or did it work out of the box?

> > You're right.  I think that should be probably be removed.
> > 
> > Does the following patch also resolve the problem for you?
> 
> Yes, the patch works great.  Thanks!  I assume you are going to commit
> that to OpenSSH?  DES, can you import this as a vendor fix on the
> vendor branch?

Yes, it has been committed and will be in 4.4p1.

Thanks again.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.



More information about the openssh-unix-dev mailing list