summaryrefslogtreecommitdiff
path: root/README.privsep
diff options
context:
space:
mode:
authorDamien Miller <djm@mindrot.org>2002-06-22 00:48:02 +1000
committerDamien Miller <djm@mindrot.org>2002-06-22 00:48:02 +1000
commit828b1962141114df191013abe18e425e10df868d (patch)
treee5cb92751abc3403c45904dc8c76ff6aa4660361 /README.privsep
parent263d68fc567c831e1e16d5c49efb4964ed144f64 (diff)
mention systems without mmap or MAP_ANON
Diffstat (limited to 'README.privsep')
-rw-r--r--README.privsep6
1 files changed, 5 insertions, 1 deletions
diff --git a/README.privsep b/README.privsep
index 79ea62783..6c798f3a4 100644
--- a/README.privsep
+++ b/README.privsep
@@ -8,6 +8,10 @@ More information is available at:
8Privilege separation is now enabled by default; see the 8Privilege separation is now enabled by default; see the
9UsePrivilegeSeparation option in sshd_config(5). 9UsePrivilegeSeparation option in sshd_config(5).
10 10
11On systems which lack mmap or anonymous (MAP_ANON) memory mapping,
12compression must be disabled in order for privilege separation to
13function.
14
11When privsep is enabled, the pre-authentication sshd process will 15When privsep is enabled, the pre-authentication sshd process will
12chroot(2) to "/var/empty" and change its privileges to the "sshd" user 16chroot(2) to "/var/empty" and change its privileges to the "sshd" user
13and its primary group. You should do something like the following to 17and its primary group. You should do something like the following to
@@ -53,4 +57,4 @@ process 1005 is the sshd process listening for new connections.
53process 6917 is the privileged monitor process, 6919 is the user owned 57process 6917 is the privileged monitor process, 6919 is the user owned
54sshd process and 6921 is the shell process. 58sshd process and 6921 is the shell process.
55 59
56$Id: README.privsep,v 1.6 2002/06/21 14:45:50 djm Exp $ 60$Id: README.privsep,v 1.7 2002/06/21 14:48:02 djm Exp $