summaryrefslogtreecommitdiff
path: root/sshd_config.5
diff options
context:
space:
mode:
Diffstat (limited to 'sshd_config.5')
-rw-r--r--sshd_config.526
1 files changed, 2 insertions, 24 deletions
diff --git a/sshd_config.5 b/sshd_config.5
index 454e46e0b..ac6ccc793 100644
--- a/sshd_config.5
+++ b/sshd_config.5
@@ -33,8 +33,8 @@
33.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 33.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
34.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
35.\" 35.\"
36.\" $OpenBSD: sshd_config.5,v 1.242 2017/02/03 23:01:19 djm Exp $ 36.\" $OpenBSD: sshd_config.5,v 1.243 2017/03/14 07:19:07 djm Exp $
37.Dd $Mdocdate: February 3 2017 $ 37.Dd $Mdocdate: March 14 2017 $
38.Dt SSHD_CONFIG 5 38.Dt SSHD_CONFIG 5
39.Os 39.Os
40.Sh NAME 40.Sh NAME
@@ -1494,28 +1494,6 @@ is enabled, you will not be able to run
1494as a non-root user. 1494as a non-root user.
1495The default is 1495The default is
1496.Cm no . 1496.Cm no .
1497.It Cm UsePrivilegeSeparation
1498Specifies whether
1499.Xr sshd 8
1500separates privileges by creating an unprivileged child process
1501to deal with incoming network traffic.
1502After successful authentication, another process will be created that has
1503the privilege of the authenticated user.
1504The goal of privilege separation is to prevent privilege
1505escalation by containing any corruption within the unprivileged processes.
1506The argument must be
1507.Cm yes ,
1508.Cm no ,
1509or
1510.Cm sandbox .
1511If
1512.Cm UsePrivilegeSeparation
1513is set to
1514.Cm sandbox
1515then the pre-authentication unprivileged process is subject to additional
1516restrictions.
1517The default is
1518.Cm sandbox .
1519.It Cm VersionAddendum 1497.It Cm VersionAddendum
1520Optionally specifies additional text to append to the SSH protocol banner 1498Optionally specifies additional text to append to the SSH protocol banner
1521sent by the server upon connection. 1499sent by the server upon connection.