Re: OpenSSH Vulns (new?) Priv seperation

["Michael Greenberg" <greenberg () nji com>]

> "However, with privileges separation turned on, you are 
> immune from at least one remote hole."
> at least one? Jesus how many are there? any information 
> would be appreciated....
> -wire

I think he means to imply that with UsePrivilegeSeparation, you'll be 
immune to unknown bugs in the nearly twenty-five thousand lines of non-
root code.

I would liken this to Apache, running as 'nobody' or a separate user, 
as compared with IIS, running as 'System'.  It's a Good Thing.

Michael.