[Wylug-discuss] sshd vuln

[John Hodrien]

On Wed, 17 Sep 2003, James Holden wrote:

> Morning all...
>
> Hands up all who haven't patched their boxes running sshd?
>
> FYI, you can do the upgrade whilst connected via ssh, just do kill -HUP
> `cat /var/run/sshd.pid` and it'll upgrade the running server without
> disconnecting you.

I've never found doing an /etc/init.d/ssh restart has ever caused me any
problems with disconnects.  Looking in the script, all it does is a
stop;start, and stop kills sshd with a TERM signal.

That's because it spawns a separate process per connection, so your running
connection doesn't get touched.  Easy test is to kill -TERM `cat
/var/run/sshd,pid` and you notice you don't get disconnected.

jh

--
"I don't want to achieve immortality through my work... I want to achieve it
 through not dying."
                                                     -- Woody Allen