Re: [cobalt-users] RAQ4 SSH

[Bruce Timberlake <bruce@xxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> I think SUN had an SSH package in the Security Hardening Package
> (SHP) that they withdrew because it, er um, was not very secure.  I
> run both the SolarSpeed and PkgMaster SSH distros and have never
> had a problem (yet).  I too would be interested if anyone has any
> objective input on this, but for my subjective comment I will
> invoice $0.01.

Sun has not released SSH in any product except the RaQ 550.  The SHP 
contained buffer overflow and auto-port-scan detection features from 
the Phoenix/Adaptive Firewall product, and some other stuff:

apache-1.3.20-RaQ4_1C3stackguard.i386.rpm
apache-admsrv-1.3.20-RaQ4_1C3stackguard.i386.rpm
apache-devel-1.3.20-RaQ4_1C3stackguard.i386.rpm
apache-mod_perl-1.3.20-RaQ4_1C3stackguard.i386.rpm
apache-openssl-1.3.20-RaQ4_1C3stackguard.i386.rpm
base-scandetection-misc-1.0-25.i386.rpm
bind-8.2.3-C5stackguard.i386.rpm
bind-devel-8.2.3-C5stackguard.i386.rpm
bind-utils-8.2.3-C5stackguard.i386.rpm
cobalt-locale_en-4.4-RaQ4.i386.rpm
fwall-kernel-1.8_2.2.16C32_III-4.i386.rpm
imap-4.7c2-C4stackguard.i386.rpm
imap-devel-4.7c2-C4stackguard.i386.rpm
pafmgr-1.2-2.i386.rpm
proftpd-1.2.4-stackguardC4.i386.rpm
qpopper-3.0.2-C6stackguard.i386.rpm
sendmail-8.10.2-C1stackguard.i386.rpm
sgalertd-1.0-24.i386.rpm
telnet-0.17-18C2stackguard.i386.rpm
telnet-server-0.17-18C2stackguard.i386.rpm
ui-3100raq-9.3-2.noarch.rpm

I have used both PkgMaster and SolarSpeed SSH PKGs with no problems on 
all machines.  I think SolarSpeed has the newest 3.5 version of 
SSH...

If you're really not sure about any PKGs, you can always get the 
source and compile it yourself (or use RPMS).  :)

- -- 
Bruce Timberlake

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+Y7bOvLA2hUZ9kgwRAibgAJ41rLpU+k/nXtbxO4iEzgRtnZ1iDgCeI71O
frI+2Lx8movx2iJ9cHp6IWQ=
=h6ru
-----END PGP SIGNATURE-----