I am trying to upgrade from OpenSSH 3.1p1 to Openssh 3.4p1 due to the Cert advisory and would like to know more about the Privilege Separation. Can't find very good information on the web. For example, I added a userid of sshd, but did not give it a home directory or special group permissions. Anything I need to know about creating this userid ?. Any problems I should know for Solaris or AIX before I start upgrading my production servers?. Should I wait for 3.4.1 release ? Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.