Subject: Re: A couple of security-related issues.
To: Richard Rauch <rauch@eecs.ukans.edu>
From: Manuel Bouyer <bouyer@antioche.lip6.fr>
List: tech-security
Date: 12/28/2000 19:17:17
On Thu, Dec 28, 2000 at 08:04:55AM -0600, Richard Rauch wrote:
> (^& 'Sokay. But we _should_ have man-pages on them, yes? Or does
> OpenSSH blow off documentation? If it's an OpenSSH problem, we probably
> don't need to get too concerned about it (assuming that we get that
> previously-mentioned new ssh implementation by the next release).
Don't know. If it's documented in ssh man page I'd say it's enouth.
an ssh.conf man page could just be a link to the ssh one.
>
> I would, if I were admining a system for more than just myself.
>
> For email, I presently find it more convenient to use a remote account.
> This lets me take my system down for various reasons and arbitrary
> duration with relative impunity. My crontab is unexciting (just a stock
> daily/weekly pair of events). The only things that I look for at all in
> root's mail are:
>
> *.core files.
>
> Package security warnings
>
> (I skim the rest lightly, but I don't think that I've ever seen anything
> interesting show up, since my system sees very low use.)
>
> I could see about a disk failure being a concern, I guess. But it's less
> painful, and probably more useful, to keep relatively current
> backups. (Not that that invalidates the notion of scanning the mail for
> such problems. But...it does make it less of an issue to catch it.)
Ok, if it's only a workstation I guess it's ok then :)
--
Manuel Bouyer, LIP6, Universite Paris VI. Manuel.Bouyer@lip6.fr
--