UnixWare tip is no longer needed.

This commit is contained in:
Tim Rice 2002-06-25 17:25:47 -07:00
parent a95fd3f8ad
commit e04ee923d9
2 changed files with 5 additions and 7 deletions

View File

@ -29,6 +29,7 @@
- (tim) [Makefile.in] fix test on installing ssh-rand-helper.8 - (tim) [Makefile.in] fix test on installing ssh-rand-helper.8
- (bal) added back in error check for mmap(). I screwed up, Pointed - (bal) added back in error check for mmap(). I screwed up, Pointed
out by stevesk@ out by stevesk@
- (tim) [README.privsep] UnixWare tip no longer needed.
20020625 20020625
- (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh
@ -1128,4 +1129,4 @@
- (stevesk) entropy.c: typo in debug message - (stevesk) entropy.c: typo in debug message
- (djm) ssh-keygen -i needs seeded RNG; report from markus@ - (djm) ssh-keygen -i needs seeded RNG; report from markus@
$Id: ChangeLog,v 1.2284 2002/06/26 00:22:57 mouring Exp $ $Id: ChangeLog,v 1.2285 2002/06/26 00:25:47 tim Exp $

View File

@ -23,9 +23,6 @@ prepare the privsep preauth environment:
# groupadd sshd # groupadd sshd
# useradd -g sshd -c 'sshd privsep' -d /var/empty sshd # useradd -g sshd -c 'sshd privsep' -d /var/empty sshd
If you are on UnixWare 7 or OpenUNIX 8 do this additional step.
# ln /usr/lib/.ns.so /usr/lib/ns.so.1
/var/empty should not contain any files. /var/empty should not contain any files.
configure supports the following options to change the default configure supports the following options to change the default
@ -34,8 +31,8 @@ privsep user and chroot directory:
--with-privsep-path=xxx Path for privilege separation chroot --with-privsep-path=xxx Path for privilege separation chroot
--with-privsep-user=user Specify non-privileged user for privilege separation --with-privsep-user=user Specify non-privileged user for privilege separation
Privsep requires operating system support for file descriptor passing Privsep requires operating system support for file descriptor passing.
and mmap(MAP_ANON). Compression will be disabled on systems without a working mmap MAP_ANON.
PAM-enabled OpenSSH is known to function with privsep on Linux. PAM-enabled OpenSSH is known to function with privsep on Linux.
It does not function on HP-UX with a trusted system It does not function on HP-UX with a trusted system
@ -57,4 +54,4 @@ process 1005 is the sshd process listening for new connections.
process 6917 is the privileged monitor process, 6919 is the user owned process 6917 is the privileged monitor process, 6919 is the user owned
sshd process and 6921 is the shell process. sshd process and 6921 is the shell process.
$Id: README.privsep,v 1.8 2002/06/24 16:49:22 stevesk Exp $ $Id: README.privsep,v 1.9 2002/06/26 00:25:48 tim Exp $