sshd, was priviledges ports, was Re: spamd

>>>>> "Theo" == Theo de Raadt <deraadt@cvs.openbsd.org> writes:

    Theo> And that is the point.  Regular users can't start up a fake
    Theo> sshd or httpd on a machine that doesn't have one running by
    Theo> default.

sshd is not a good example. The protocol robustness doesn't solely rely on port being reserved, it does rely on server private key being available only to the root user.

Bye
Greg Received on Thu Jan 30 17:45:08 2003