tyler.durden/openssh-portable
1
0
Fork 0
mirror of https://github.com/PowerShell/openssh-portable.git synced 2025-07-31 01:35:11 +02:00
Code Issues Packages Projects Releases Wiki Activity

- (stevesk) [README.privsep] minor updates

Browse Source
This commit is contained in:
Kevin Steves 2002-06-24 16:49:22 +00:00
parent 34f0d8f404
commit d48663602d
2 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog
View File

@ -1,5 +1,6 @@
20020625 20020625
- (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh
- (stevesk) [README.privsep] minor updates
20020624 20020624
- OpenBSD CVS Sync - OpenBSD CVS Sync
@ -1085,4 +1086,4 @@
- (stevesk) entropy.c: typo in debug message - (stevesk) entropy.c: typo in debug message
- (djm) ssh-keygen -i needs seeded RNG; report from markus@ - (djm) ssh-keygen -i needs seeded RNG; report from markus@
$Id: ChangeLog,v 1.2265 2002/06/24 16:26:49 stevesk Exp $ $Id: ChangeLog,v 1.2266 2002/06/24 16:49:22 stevesk Exp $

6
README.privsep
View File

@ -12,7 +12,7 @@ On systems which lack mmap or anonymous (MAP_ANON) memory mapping,
compression must be disabled in order for privilege separation to compression must be disabled in order for privilege separation to
function. function.
When privsep is enabled, the pre-authentication sshd process will When privsep is enabled, during the pre-authentication phase sshd will
chroot(2) to "/var/empty" and change its privileges to the "sshd" user chroot(2) to "/var/empty" and change its privileges to the "sshd" user
and its primary group. You should do something like the following to and its primary group. You should do something like the following to
prepare the privsep preauth environment: prepare the privsep preauth environment:
@ -21,7 +21,7 @@ prepare the privsep preauth environment:
# chown root:sys /var/empty # chown root:sys /var/empty
# chmod 755 /var/empty # chmod 755 /var/empty
# groupadd sshd # groupadd sshd
# useradd -g sshd sshd # useradd -g sshd -c 'sshd privsep' -d /var/empty sshd
If you are on UnixWare 7 or OpenUNIX 8 do this additional step. If you are on UnixWare 7 or OpenUNIX 8 do this additional step.
# ln /usr/lib/.ns.so /usr/lib/ns.so.1 # ln /usr/lib/.ns.so /usr/lib/ns.so.1
@ -57,4 +57,4 @@ process 1005 is the sshd process listening for new connections.
process 6917 is the privileged monitor process, 6919 is the user owned process 6917 is the privileged monitor process, 6919 is the user owned
sshd process and 6921 is the shell process. sshd process and 6921 is the shell process.
$Id: README.privsep,v 1.7 2002/06/21 14:48:02 djm Exp $ $Id: README.privsep,v 1.8 2002/06/24 16:49:22 stevesk Exp $