diff options
| author | Damien Miller <djm@mindrot.org> | 2016-09-29 03:19:23 +1000 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2016-09-29 03:19:23 +1000 |
| commit | 1cfd5c06efb121e58e8b6671548fda77ef4b4455 (patch) | |
| tree | 50ef8285aad52b66f5ed6a15b4b1a33ec2a32372 /README.privsep | |
| parent | 0082fba4efdd492f765ed4c53f0d0fbd3bdbdf7f (diff) | |
| download | openssh-git-1cfd5c06efb121e58e8b6671548fda77ef4b4455.tar.gz | |
Remove portability support for mmap
We no longer need to wrap/replace mmap for portability now that
pre-auth compression has been removed from OpenSSH.
Diffstat (limited to 'README.privsep')
| -rw-r--r-- | README.privsep | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/README.privsep b/README.privsep index d910650c..2120544c 100644 --- a/README.privsep +++ b/README.privsep @@ -8,10 +8,6 @@ More information is available at: Privilege separation is now enabled by default; see the UsePrivilegeSeparation option in sshd_config(5). -On systems which lack mmap or anonymous (MAP_ANON) memory mapping, -compression must be disabled in order for privilege separation to -function. - When privsep is enabled, during the pre-authentication phase sshd will chroot(2) to "/var/empty" and change its privileges to the "sshd" user and its primary group. sshd is a pseudo-account that should not be @@ -35,9 +31,6 @@ privsep user and chroot directory: --with-privsep-path=xxx Path for privilege separation chroot --with-privsep-user=user Specify non-privileged user for privilege separation -Privsep requires operating system support for file descriptor passing. -Compression will be disabled on systems without a working mmap MAP_ANON. - PAM-enabled OpenSSH is known to function with privsep on AIX, FreeBSD, HP-UX (including Trusted Mode), Linux, NetBSD and Solaris. |