[BSD] ssh segfault
Gabor HALASZ
halasz.g at freemail.hu
2010. Jún. 23., Sze, 11:26:16 CEST
On 2010.06.23. 11:19, Gabor PALI wrote:
> 2010/6/23 Gabor HALASZ<halasz.g at freemail.hu>:
>> Mire is gondolsz? Egy mukodo szerver, szoval van egy-ket config, de a base
>> rendszer erintetlen, azt nem updatelem, csak ha uj release van.
>
> Arra gondoltam, hogy van-e valami nagyon trukkos beallitas mondjuk
> az sshd_config allomanyban, a make.conf-ban, vagy barhol a
> rendszerben.
>
Az sshd config egyforma az osszes gepen, semmi extra.
Port 22
AddressFamily inet
ListenAddress 0.0.0.0
Protocol 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
SyslogFacility AUTH
LogLevel INFO
LoginGraceTime 1m
PermitRootLogin yes
#StrictModes yes
MaxAuthTries 3
MaxSessions 10
RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile /etc/ssh/authorized_keys
HostbasedAuthentication no
IgnoreUserKnownHosts no
IgnoreRhosts yes
PasswordAuthentication no
PermitEmptyPasswords no
ChallengeResponseAuthentication yes
KerberosAuthentication no
KerberosOrLocalPasswd no
KerberosTicketCleanup yes
GSSAPIAuthentication no
GSSAPICleanupCredentials no
UsePAM yes
AllowAgentForwarding yes
AllowTcpForwarding yes
GatewayPorts no
X11Forwarding no
X11DisplayOffset 10
X11UseLocalhost yes
PrintMotd yes
PrintLastLog yes
TCPKeepAlive yes
UseLogin yes
UsePrivilegeSeparation yes
PermitUserEnvironment no
Compression delayed
ClientAliveInterval 0
ClientAliveCountMax 3
UseDNS yes
PidFile /var/run/sshd.pid
MaxStartups 10
PermitTunnel no
ChrootDirectory none
Banner none
Subsystem sftp /usr/libexec/sftp-server
Match User root
X11Forwarding yes
AllowTcpForwarding yes
(a kerberosauth-ot probakent kapcsoltam ki, bar amugy sem mukodik,
mintha nem forditottak volna bele)
A make.conf-ban csak a perl verzio van, ami installkor kerult bele. Az
src.conf jo hosszu:
[root at ga-k8nf-9-4 /tmp]# grep -v ^# /etc/src.conf
WITHOUT_AMD="YES"
WITHOUT_APM="YES"
WITHOUT_ASSERT_DEBUG="YES"
WITHOUT_AT="YES"
WITHOUT_ATM="YES"
WITHOUT_AUTHPF="YES"
WITHOUT_BIND="YES"
WITHOUT_BIND_DNSSEC="YES"
WITHOUT_BIND_ETC="YES"
WITHOUT_BIND_LIBS_LWRES="YES"
WITHOUT_BIND_MTREE="YES"
WITHOUT_BIND_NAMED="YES"
WITHOUT_BIND_UTILS="YES"
WITHOUT_BLUETOOTH="YES"
WITHOUT_BSNMP="YES"
WITHOUT_CALENDAR="YES"
WITHOUT_DICT="YES"
WITHOUT_GAMES="YES"
WITHOUT_GDB="YES"
WITHOUT_GPIB="YES"
WITHOUT_HTML="YES"
WITH_IDEA="YES"
WITHOUT_INET6="YES"
WIHTOUT_INET6_SUPPORT="YES"
WITHOUT_INFO="YES"
WITHOUT_IPFILTER="YES"
WITHOUT_IPFW="YES"
WITHOUT_IPX="YES"
WITHOUT_IPX_SUPPORT="YES"
WITHOUT_KVM="YES"
WITHOUT_KVM_SUPPORT="YES"
WITHOUT_LIB32="YES"
WITHOUT_LIBPTHREAD="YES"
WITHOUT_LIBTHR="YES"
WITHOUT_LOCALES="YES"
WITHOUT_NCP="YES"
WITHOUT_NDIS="YES"
WITHOUT_NETGRAPH="YES"
WITHOUT_NETGRAPH_SUPPORT="YES"
WITHOUT_NIS="YES"
WITHOUT_NLS="YES"
WITHOUT_NLS_CATALOGS="YES"
WITHOUT_PF="YES"
WITHOUT_PROFILE="YES"
WITHOUT_QUOTAS="YES"
WITHOUT_RCMDS="YES"
WITHOUT_ROUTED="YES"
WITHOUT_SHAREDOCS="YES"
WITHOUT_WIRELESS="YES"
WITHOUT_WIRELESS_SUPPORT="YES"
WITHOUT_WPA_SUPPLICANT_EAPOL="YES"
LOADER_ZFS_SUPPORT="YES"
--
Gabor HALASZ <halasz.g at freemail.hu>
További információk a(z) BSD levelezőlistáról