diff options
| author | Tim Rice <tim@multitalents.net> | 2002-06-25 17:25:47 -0700 |
|---|---|---|
| committer | Tim Rice <tim@multitalents.net> | 2002-06-25 17:25:47 -0700 |
| commit | e04ee923d950f76132fa137f5e33ff42b94126be (patch) | |
| tree | 03ebde937f6c3d7954c1f86f8bc1851a5db8a62a /README.privsep | |
| parent | a95fd3f8ad53d2ac2fb26558e033bd5180131c77 (diff) | |
| download | openssh-git-e04ee923d950f76132fa137f5e33ff42b94126be.tar.gz | |
UnixWare tip is no longer needed.
Diffstat (limited to 'README.privsep')
| -rw-r--r-- | README.privsep | 9 |
1 files changed, 3 insertions, 6 deletions
diff --git a/README.privsep b/README.privsep index 12b9cb2f..dd8069a7 100644 --- a/README.privsep +++ b/README.privsep @@ -23,9 +23,6 @@ prepare the privsep preauth environment: # groupadd sshd # useradd -g sshd -c 'sshd privsep' -d /var/empty sshd -If you are on UnixWare 7 or OpenUNIX 8 do this additional step. - # ln /usr/lib/.ns.so /usr/lib/ns.so.1 - /var/empty should not contain any files. configure supports the following options to change the default @@ -34,8 +31,8 @@ privsep user and chroot directory: --with-privsep-path=xxx Path for privilege separation chroot --with-privsep-user=user Specify non-privileged user for privilege separation -Privsep requires operating system support for file descriptor passing -and mmap(MAP_ANON). +Privsep requires operating system support for file descriptor passing. +Compression will be disabled on systems without a working mmap MAP_ANON. PAM-enabled OpenSSH is known to function with privsep on Linux. It does not function on HP-UX with a trusted system @@ -57,4 +54,4 @@ process 1005 is the sshd process listening for new connections. process 6917 is the privileged monitor process, 6919 is the user owned sshd process and 6921 is the shell process. -$Id: README.privsep,v 1.8 2002/06/24 16:49:22 stevesk Exp $ +$Id: README.privsep,v 1.9 2002/06/26 00:25:48 tim Exp $ |