o Merge changes from OPENSSH_3_5P1_GSI_20021018.

[gssapi-openssh.git] / openssh / contrib / cygwin / README

diff --git a/openssh/contrib/cygwin/README b/openssh/contrib/cygwin/README
index 9021ba2b0322d36400228d24fae736cf435b2a2f..71ea3455fa8be4a728f076674d0456786e6990a5 100644 (file)
--- a/openssh/contrib/cygwin/README
+++ b/openssh/contrib/cygwin/README
@@ -1,5 +1,29 @@
 This package is the actual port of OpenSSH to Cygwin 1.3.
 
+===========================================================================
+Important change since 3.4p1-2:
+
+This version adds privilege separation as default setting, see
+/usr/doc/openssh/README.privsep.  According to that document the
+privsep feature requires a non-privileged account called 'sshd'.
+
+The new ssh-host-config file which is part of this version asks
+to create 'sshd' as local user if you want to use privilege
+separation.  If you confirm, it creates that NT user and adds
+the necessary entry to /etc/passwd.
+
+On 9x/Me systems the script just sets UsePrivilegeSeparation to "no"
+since that feature doesn't make any sense on a system which doesn't
+differ between privileged and unprivileged users.
+
+The new ssh-host-config script also adds the /var/empty directory
+needed by privilege separation.  When creating the /var/empty directory
+by yourself, please note that in contrast to the README.privsep document
+the owner sshould not be "root" but the user which is running sshd.  So,
+in the standard configuration this is SYSTEM.  The ssh-host-config script
+chowns /var/empty accordingly.
+===========================================================================
+
 ===========================================================================
 Important change since 3.0.1p1-2: