X-Recipient: archive-cygwin@delorie.com X-Spam-Check-By: sourceware.org References: <664060.6380.qm@web34704.mail.mud.yahoo.com> <933558.98400.qm@web34705.mail.mud.yahoo.com> <4934527E.2070200@cygwin.com> <961872.64997.qm@web34701.mail.mud.yahoo.com> <493568B8.3010308@cygwin.com> <49376.99112.qm@web34702.mail.mud.yahoo.com> <20081202231141.GA5449@ednor.casa.cgf.cx> <451120.45664.qm@web34703.mail.mud.yahoo.com> <4935DD4B.7050907@cygwin.com> <690548.2534.qm@web34702.mail.mud.yahoo.com> <49366705.5D2D6371@dessent.net> <940072.24685.qm@web34702.mail.mud.yahoo.com> <49368561.A8EAD4CF@dessent.net> <371457.93288.qm@web34704.mail.mud.yahoo.com> <49368C19.3060705@byu.net> Date: Wed, 3 Dec 2008 07:03:31 -0800 (PST) From: TheO Subject: Re: Finally managed to create a jailed SFTP server, but how secure? To: Eric Blake , cygwin@cygwin.com MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Message-ID: <378707.37220.qm@web34701.mail.mud.yahoo.com> X-IsSubscribed: yes Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com > > And what about Brian's other point - if sshd has a security bug like a > buffer overrun (shudder, but possible - look at how often openssh has been > updated over the years to fix security holes as soon as someone identifies > one) > Such hole would affect all OpenSSH implementation. Even the Linux version. Am I correct? -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/