summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--debian/README.Debian10
1 files changed, 3 insertions, 7 deletions
diff --git a/debian/README.Debian b/debian/README.Debian
index bb1f7cf48..cb1444a47 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -33,15 +33,11 @@ Privilege Separation
33 33
34As of 3.3, openssh has employed privilege separation to reduce the 34As of 3.3, openssh has employed privilege separation to reduce the
35quantity of code that runs as root, thereby reducing the impact of 35quantity of code that runs as root, thereby reducing the impact of
36some security holes in sshd. 36some security holes in sshd. This now also works properly with PAM.
37 37
38Unfortunately, privilege separation interacts badly with PAM. Any PAM 38Privilege separation is turned on by default, so, if you decide you
39session modules that need to run as root (pam_mkhomedir, for example)
40will fail, and PAM keyboard-interactive authentication won't work.
41
42Privilege separation is turned on by default, so if you decide you
43want it turned off, you need to add "UsePrivilegeSeparation no" to 39want it turned off, you need to add "UsePrivilegeSeparation no" to
44/etc/ssh/sshd_config 40/etc/ssh/sshd_config.
45 41
46PermitRootLogin set to yes 42PermitRootLogin set to yes
47-------------------------- 43--------------------------