diff options
author | Kevin Steves <stevesk@pobox.com> | 2002-06-24 16:49:22 +0000 |
---|---|---|
committer | Kevin Steves <stevesk@pobox.com> | 2002-06-24 16:49:22 +0000 |
commit | d48663602d55d324aa4c5964b9782a876de0ff5b (patch) | |
tree | 8c772f7ac5db03acada74e27ee1f8ff99f936941 | |
parent | 34f0d8f4040c3fe55e3a69aa92d18482077dd202 (diff) | |
download | openssh-git-d48663602d55d324aa4c5964b9782a876de0ff5b.tar.gz |
- (stevesk) [README.privsep] minor updates
-rw-r--r-- | ChangeLog | 3 | ||||
-rw-r--r-- | README.privsep | 6 |
2 files changed, 5 insertions, 4 deletions
@@ -1,5 +1,6 @@ 20020625 - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh + - (stevesk) [README.privsep] minor updates 20020624 - OpenBSD CVS Sync @@ -1085,4 +1086,4 @@ - (stevesk) entropy.c: typo in debug message - (djm) ssh-keygen -i needs seeded RNG; report from markus@ -$Id: ChangeLog,v 1.2265 2002/06/24 16:26:49 stevesk Exp $ +$Id: ChangeLog,v 1.2266 2002/06/24 16:49:22 stevesk Exp $ diff --git a/README.privsep b/README.privsep index 6c798f3a..12b9cb2f 100644 --- a/README.privsep +++ b/README.privsep @@ -12,7 +12,7 @@ On systems which lack mmap or anonymous (MAP_ANON) memory mapping, compression must be disabled in order for privilege separation to function. -When privsep is enabled, the pre-authentication sshd process will +When privsep is enabled, during the pre-authentication phase sshd will chroot(2) to "/var/empty" and change its privileges to the "sshd" user and its primary group. You should do something like the following to prepare the privsep preauth environment: @@ -21,7 +21,7 @@ prepare the privsep preauth environment: # chown root:sys /var/empty # chmod 755 /var/empty # groupadd sshd - # useradd -g sshd sshd + # useradd -g sshd -c 'sshd privsep' -d /var/empty sshd If you are on UnixWare 7 or OpenUNIX 8 do this additional step. # ln /usr/lib/.ns.so /usr/lib/ns.so.1 @@ -57,4 +57,4 @@ process 1005 is the sshd process listening for new connections. process 6917 is the privileged monitor process, 6919 is the user owned sshd process and 6921 is the shell process. -$Id: README.privsep,v 1.7 2002/06/21 14:48:02 djm Exp $ +$Id: README.privsep,v 1.8 2002/06/24 16:49:22 stevesk Exp $ |