summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--README.privsep6
1 files changed, 5 insertions, 1 deletions
diff --git a/README.privsep b/README.privsep
index 79ea62783..6c798f3a4 100644
--- a/README.privsep
+++ b/README.privsep
@@ -8,6 +8,10 @@ More information is available at:
8Privilege separation is now enabled by default; see the 8Privilege separation is now enabled by default; see the
9UsePrivilegeSeparation option in sshd_config(5). 9UsePrivilegeSeparation option in sshd_config(5).
10 10
11On systems which lack mmap or anonymous (MAP_ANON) memory mapping,
12compression must be disabled in order for privilege separation to
13function.
14
11When privsep is enabled, the pre-authentication sshd process will 15When privsep is enabled, the pre-authentication sshd process will
12chroot(2) to "/var/empty" and change its privileges to the "sshd" user 16chroot(2) to "/var/empty" and change its privileges to the "sshd" user
13and its primary group. You should do something like the following to 17and its primary group. You should do something like the following to
@@ -53,4 +57,4 @@ process 1005 is the sshd process listening for new connections.
53process 6917 is the privileged monitor process, 6919 is the user owned 57process 6917 is the privileged monitor process, 6919 is the user owned
54sshd process and 6921 is the shell process. 58sshd process and 6921 is the shell process.
55 59
56$Id: README.privsep,v 1.6 2002/06/21 14:45:50 djm Exp $ 60$Id: README.privsep,v 1.7 2002/06/21 14:48:02 djm Exp $