summaryrefslogtreecommitdiff
path: root/README.privsep
diff options
context:
space:
mode:
Diffstat (limited to 'README.privsep')
-rw-r--r--README.privsep9
1 files changed, 0 insertions, 9 deletions
diff --git a/README.privsep b/README.privsep
index f565e72da..2120544c7 100644
--- a/README.privsep
+++ b/README.privsep
@@ -8,10 +8,6 @@ More information is available at:
8Privilege separation is now enabled by default; see the 8Privilege separation is now enabled by default; see the
9UsePrivilegeSeparation option in sshd_config(5). 9UsePrivilegeSeparation option in sshd_config(5).
10 10
11On systems which lack mmap or anonymous (MAP_ANON) memory mapping,
12compression must be disabled in order for privilege separation to
13function.
14
15When privsep is enabled, during the pre-authentication phase sshd will 11When privsep is enabled, during the pre-authentication phase sshd will
16chroot(2) to "/var/empty" and change its privileges to the "sshd" user 12chroot(2) to "/var/empty" and change its privileges to the "sshd" user
17and its primary group. sshd is a pseudo-account that should not be 13and its primary group. sshd is a pseudo-account that should not be
@@ -35,9 +31,6 @@ privsep user and chroot directory:
35 --with-privsep-path=xxx Path for privilege separation chroot 31 --with-privsep-path=xxx Path for privilege separation chroot
36 --with-privsep-user=user Specify non-privileged user for privilege separation 32 --with-privsep-user=user Specify non-privileged user for privilege separation
37 33
38Privsep requires operating system support for file descriptor passing.
39Compression will be disabled on systems without a working mmap MAP_ANON.
40
41PAM-enabled OpenSSH is known to function with privsep on AIX, FreeBSD, 34PAM-enabled OpenSSH is known to function with privsep on AIX, FreeBSD,
42HP-UX (including Trusted Mode), Linux, NetBSD and Solaris. 35HP-UX (including Trusted Mode), Linux, NetBSD and Solaris.
43 36
@@ -59,5 +52,3 @@ Given the following process listing (from HP-UX):
59process 1005 is the sshd process listening for new connections. 52process 1005 is the sshd process listening for new connections.
60process 6917 is the privileged monitor process, 6919 is the user owned 53process 6917 is the privileged monitor process, 6919 is the user owned
61sshd process and 6921 is the shell process. 54sshd process and 6921 is the shell process.
62
63$Id: README.privsep,v 1.16 2005/06/04 23:21:41 djm Exp $