diff options
-rw-r--r-- | ChangeLog | 3 | ||||
-rw-r--r-- | README.privsep | 6 |
2 files changed, 5 insertions, 4 deletions
@@ -1,5 +1,6 @@ | |||
1 | 20020625 | 1 | 20020625 |
2 | - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh | 2 | - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh |
3 | - (stevesk) [README.privsep] minor updates | ||
3 | 4 | ||
4 | 20020624 | 5 | 20020624 |
5 | - OpenBSD CVS Sync | 6 | - OpenBSD CVS Sync |
@@ -1085,4 +1086,4 @@ | |||
1085 | - (stevesk) entropy.c: typo in debug message | 1086 | - (stevesk) entropy.c: typo in debug message |
1086 | - (djm) ssh-keygen -i needs seeded RNG; report from markus@ | 1087 | - (djm) ssh-keygen -i needs seeded RNG; report from markus@ |
1087 | 1088 | ||
1088 | $Id: ChangeLog,v 1.2265 2002/06/24 16:26:49 stevesk Exp $ | 1089 | $Id: ChangeLog,v 1.2266 2002/06/24 16:49:22 stevesk Exp $ |
diff --git a/README.privsep b/README.privsep index 6c798f3a4..12b9cb2fc 100644 --- a/README.privsep +++ b/README.privsep | |||
@@ -12,7 +12,7 @@ On systems which lack mmap or anonymous (MAP_ANON) memory mapping, | |||
12 | compression must be disabled in order for privilege separation to | 12 | compression must be disabled in order for privilege separation to |
13 | function. | 13 | function. |
14 | 14 | ||
15 | When privsep is enabled, the pre-authentication sshd process will | 15 | When privsep is enabled, during the pre-authentication phase sshd will |
16 | chroot(2) to "/var/empty" and change its privileges to the "sshd" user | 16 | chroot(2) to "/var/empty" and change its privileges to the "sshd" user |
17 | and its primary group. You should do something like the following to | 17 | and its primary group. You should do something like the following to |
18 | prepare the privsep preauth environment: | 18 | prepare the privsep preauth environment: |
@@ -21,7 +21,7 @@ prepare the privsep preauth environment: | |||
21 | # chown root:sys /var/empty | 21 | # chown root:sys /var/empty |
22 | # chmod 755 /var/empty | 22 | # chmod 755 /var/empty |
23 | # groupadd sshd | 23 | # groupadd sshd |
24 | # useradd -g sshd sshd | 24 | # useradd -g sshd -c 'sshd privsep' -d /var/empty sshd |
25 | 25 | ||
26 | If you are on UnixWare 7 or OpenUNIX 8 do this additional step. | 26 | If you are on UnixWare 7 or OpenUNIX 8 do this additional step. |
27 | # ln /usr/lib/.ns.so /usr/lib/ns.so.1 | 27 | # ln /usr/lib/.ns.so /usr/lib/ns.so.1 |
@@ -57,4 +57,4 @@ process 1005 is the sshd process listening for new connections. | |||
57 | process 6917 is the privileged monitor process, 6919 is the user owned | 57 | process 6917 is the privileged monitor process, 6919 is the user owned |
58 | sshd process and 6921 is the shell process. | 58 | sshd process and 6921 is the shell process. |
59 | 59 | ||
60 | $Id: README.privsep,v 1.7 2002/06/21 14:48:02 djm Exp $ | 60 | $Id: README.privsep,v 1.8 2002/06/24 16:49:22 stevesk Exp $ |