diff options
| -rw-r--r-- | ChangeLog | 3 | ||||
| -rw-r--r-- | README.privsep | 9 |
2 files changed, 5 insertions, 7 deletions
@@ -29,6 +29,7 @@ - (tim) [Makefile.in] fix test on installing ssh-rand-helper.8 - (bal) added back in error check for mmap(). I screwed up, Pointed out by stevesk@ + - (tim) [README.privsep] UnixWare tip no longer needed. 20020625 - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh @@ -1128,4 +1129,4 @@ - (stevesk) entropy.c: typo in debug message - (djm) ssh-keygen -i needs seeded RNG; report from markus@ -$Id: ChangeLog,v 1.2284 2002/06/26 00:22:57 mouring Exp $ +$Id: ChangeLog,v 1.2285 2002/06/26 00:25:47 tim Exp $ diff --git a/README.privsep b/README.privsep index 12b9cb2f..dd8069a7 100644 --- a/README.privsep +++ b/README.privsep @@ -23,9 +23,6 @@ prepare the privsep preauth environment: # groupadd sshd # useradd -g sshd -c 'sshd privsep' -d /var/empty sshd -If you are on UnixWare 7 or OpenUNIX 8 do this additional step. - # ln /usr/lib/.ns.so /usr/lib/ns.so.1 - /var/empty should not contain any files. configure supports the following options to change the default @@ -34,8 +31,8 @@ privsep user and chroot directory: --with-privsep-path=xxx Path for privilege separation chroot --with-privsep-user=user Specify non-privileged user for privilege separation -Privsep requires operating system support for file descriptor passing -and mmap(MAP_ANON). +Privsep requires operating system support for file descriptor passing. +Compression will be disabled on systems without a working mmap MAP_ANON. PAM-enabled OpenSSH is known to function with privsep on Linux. It does not function on HP-UX with a trusted system @@ -57,4 +54,4 @@ process 1005 is the sshd process listening for new connections. process 6917 is the privileged monitor process, 6919 is the user owned sshd process and 6921 is the shell process. -$Id: README.privsep,v 1.8 2002/06/24 16:49:22 stevesk Exp $ +$Id: README.privsep,v 1.9 2002/06/26 00:25:48 tim Exp $ |