[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20080519202158.GK12850@outflux.net>
Date: Mon, 19 May 2008 13:21:59 -0700
From: Kees Cook <kees@...ntu.com>
To: oss-security@...ts.openwall.com
Subject: Re: OpenSSH key blacklisting
On Sun, May 18, 2008 at 08:35:10PM +0400, Solar Designer wrote:
> On Sun, May 18, 2008 at 09:12:16AM -0700, Kees Cook wrote:
> > Ah, I haven't been separating it by arch, but I can certainly do that.
> > I've been including the "full" hashes in the Debian openssh-blacklist
> > source package and reducing them for the final files. I can easily
> > split up the source blacklist files by arch and combine them during the
> > "build".
>
> Yes, please split by {arch, key type, key size}. That is, let's have
> one "source" file per combination of these.
This has been done in the 0.2.1 upload of openssh-blacklist[1]. (I also
dropped pid 0 and 32768, and sorted by pid, as mentioned earlier.)
[1] http://packages.qa.debian.org/o/openssh-blacklist.html
--
Kees Cook
Ubuntu Security Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
