diff options
| author | djm <djm> | 2012-07-31 02:21:34 +0000 |
|---|---|---|
| committer | djm <djm> | 2012-07-31 02:21:34 +0000 |
| commit | 2ab5e9979b2ba250c763db8fb927f5590ddbd6fe (patch) | |
| tree | c6eab1839fe2d4704ed26532cdfdef4903aa97a7 /servconf.h | |
| parent | c7cea378961d1e2ac5cb59822d910396212ea551 (diff) | |
| download | openssh-2ab5e9979b2ba250c763db8fb927f5590ddbd6fe.tar.gz | |
- djm@cvs.openbsd.org 2012/07/10 02:19:15
[servconf.c servconf.h sshd.c sshd_config]
Turn on systrace sandboxing of pre-auth sshd by default for new installs
by shipping a config that overrides the current UsePrivilegeSeparation=yes
default. Make it easier to flip the default in the future by adding too.
Diffstat (limited to 'servconf.h')
| -rw-r--r-- | servconf.h | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -1,4 +1,4 @@ -/* $OpenBSD: servconf.h,v 1.102 2012/06/19 18:25:28 markus Exp $ */ +/* $OpenBSD: servconf.h,v 1.103 2012/07/10 02:19:15 djm Exp $ */ /* * Author: Tatu Ylonen <ylo@cs.hut.fi> @@ -39,7 +39,7 @@ /* use_privsep */ #define PRIVSEP_OFF 0 #define PRIVSEP_ON 1 -#define PRIVSEP_SANDBOX 2 +#define PRIVSEP_NOSANDBOX 2 #define DEFAULT_AUTH_FAIL_MAX 6 /* Default for MaxAuthTries */ #define DEFAULT_SESSIONS_MAX 10 /* Default for MaxSessions */ |