> OpenSSH is I guess the most secure daemon on all your servers. Probably correct. However, sshd should be the only public facing daemon that hasn't dropped ro

> OpenSSH is I guess the most secure daemon on all your servers. Probably correct. However, sshd should be the only public facing daemon that hasn't dropped root privileges immediately after binding to its privileged port. So it should be the only daemon that can directly offer root privs to an attacker. I say "should" because it's a big world out there and people do some bizarre and indefensible things. Sometimes merely lazy things, but the net effect is the same.