Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 19 May 2008 13:21:59 -0700
From: Kees Cook <kees@...ntu.com>
To: oss-security@...ts.openwall.com
Subject: Re: OpenSSH key blacklisting

On Sun, May 18, 2008 at 08:35:10PM +0400, Solar Designer wrote:
> On Sun, May 18, 2008 at 09:12:16AM -0700, Kees Cook wrote:
> > Ah, I haven't been separating it by arch, but I can certainly do that.
> > I've been including the "full" hashes in the Debian openssh-blacklist
> > source package and reducing them for the final files.  I can easily
> > split up the source blacklist files by arch and combine them during the
> > "build".
> 
> Yes, please split by {arch, key type, key size}.  That is, let's have
> one "source" file per combination of these.

This has been done in the 0.2.1 upload of openssh-blacklist[1].  (I also
dropped pid 0 and 32768, and sorted by pid, as mentioned earlier.)

[1] http://packages.qa.debian.org/o/openssh-blacklist.html

-- 
Kees Cook
Ubuntu Security Team

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.