`
<div>OpenSSH 6.2p1 + HPN patches from 2013Q2 (http://pkgsrc.joyent.com/packages/SmartOS/2013Q2/x86_64)
</div><div>Looking at the pkgsrc source for security/openssh, the patches that are there are for Interix, which tells me OpenSSH should be just fine in illumos. (IMO, It might be good to incorporate the HPN patches for performance reasons)</div><div><br></div><div>By default from pkgsrc, the privsep model is sandbox and seems to be working fine.</div>
<div><div><br></div><div>I haven't tested the auditing support; will do that later in the week as time permits.</div><div><br></div>-- <br>Carlos<div><br></div></div>
<p style="color: #A0A0A8;">On Monday, July 15, 2013 at 2:15 PM, Tim Rice wrote:</p>
<blockquote type="cite" style="border-left-style:solid;border-width:1px;margin-left:0px;padding-left:10px;">
<span><div><div><div>On Mon, 15 Jul 2013, Paul B. Henson wrote:</div><div><br></div><blockquote type="cite"><div><div>* sunssh is integrated into the Solaris auditing framework</div><div><br></div><div>* sunssh uses the Solaris cryptographic framework rather than openssl, which</div><div>historically gave it access to hardware acceleration that openssh didn't use,</div><div>but I think openssl supports the same framework now</div><div><br></div><div>I think the only real killer would be the auditing support, if somebody was</div><div>leveraging that.</div></div></blockquote><div><br></div><div>Back in the OpenSSH 4.0 days we see this in the ChangeLog</div><div>20050220</div><div> - (dtucker) [LICENCE <a href="http://Makefile.in">Makefile.in</a> README.platform audit-bsm.c <a href="http://configure.ac">configure.ac</a></div><div> defines.h] Bug #125: Add *EXPERIMENTAL* BSM audit support. Configure</div><div> --with-audit=bsm to enable. Patch originally from Sun Microsystems,</div><div> parts by John R. Jackson. ok djm@</div><div><br></div><div>We're on 6.2 now.</div><div>Let us know if something is not working right.</div><div><br></div><div>-- </div><div>Tim Rice Multitalents</div><div><a href="mailto:tim@multitalents.net">tim@multitalents.net</a></div><div><br></div><div><br></div><div>_______________________________________________</div><div>OmniOS-discuss mailing list</div><div><a href="mailto:OmniOS-discuss@lists.omniti.com">OmniOS-discuss@lists.omniti.com</a></div><div><a href="http://lists.omniti.com/mailman/listinfo/omnios-discuss">http://lists.omniti.com/mailman/listinfo/omnios-discuss</a></div></div></div></span>
</blockquote>
<div>
<br>
</div>
`