summaryrefslogtreecommitdiff
path: root/README.privsep
diff options
context:
space:
mode:
authorDamien Miller <djm@mindrot.org>2016-09-29 03:19:23 +1000
committerDamien Miller <djm@mindrot.org>2016-09-29 03:19:23 +1000
commit1cfd5c06efb121e58e8b6671548fda77ef4b4455 (patch)
tree50ef8285aad52b66f5ed6a15b4b1a33ec2a32372 /README.privsep
parent0082fba4efdd492f765ed4c53f0d0fbd3bdbdf7f (diff)
Remove portability support for mmap
We no longer need to wrap/replace mmap for portability now that pre-auth compression has been removed from OpenSSH.
Diffstat (limited to 'README.privsep')
-rw-r--r--README.privsep7
1 files changed, 0 insertions, 7 deletions
diff --git a/README.privsep b/README.privsep
index d910650c5..2120544c7 100644
--- a/README.privsep
+++ b/README.privsep
@@ -8,10 +8,6 @@ More information is available at:
8Privilege separation is now enabled by default; see the 8Privilege separation is now enabled by default; see the
9UsePrivilegeSeparation option in sshd_config(5). 9UsePrivilegeSeparation option in sshd_config(5).
10 10
11On systems which lack mmap or anonymous (MAP_ANON) memory mapping,
12compression must be disabled in order for privilege separation to
13function.
14
15When privsep is enabled, during the pre-authentication phase sshd will 11When privsep is enabled, during the pre-authentication phase sshd will
16chroot(2) to "/var/empty" and change its privileges to the "sshd" user 12chroot(2) to "/var/empty" and change its privileges to the "sshd" user
17and its primary group. sshd is a pseudo-account that should not be 13and its primary group. sshd is a pseudo-account that should not be
@@ -35,9 +31,6 @@ privsep user and chroot directory:
35 --with-privsep-path=xxx Path for privilege separation chroot 31 --with-privsep-path=xxx Path for privilege separation chroot
36 --with-privsep-user=user Specify non-privileged user for privilege separation 32 --with-privsep-user=user Specify non-privileged user for privilege separation
37 33
38Privsep requires operating system support for file descriptor passing.
39Compression will be disabled on systems without a working mmap MAP_ANON.
40
41PAM-enabled OpenSSH is known to function with privsep on AIX, FreeBSD, 34PAM-enabled OpenSSH is known to function with privsep on AIX, FreeBSD,
42HP-UX (including Trusted Mode), Linux, NetBSD and Solaris. 35HP-UX (including Trusted Mode), Linux, NetBSD and Solaris.
43 36