- (tim) [Makefile.in] fix test on installing ssh-rand-helper.8
- (bal) added back in error check for mmap(). I screwed up, Pointed
out by stevesk@
+ - (tim) [README.privsep] UnixWare tip no longer needed.
20020625
- (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh
# groupadd sshd
# useradd -g sshd -c 'sshd privsep' -d /var/empty sshd
-If you are on UnixWare 7 or OpenUNIX 8 do this additional step.
- # ln /usr/lib/.ns.so /usr/lib/ns.so.1
-
/var/empty should not contain any files.
configure supports the following options to change the default
--with-privsep-path=xxx Path for privilege separation chroot
--with-privsep-user=user Specify non-privileged user for privilege separation
-Privsep requires operating system support for file descriptor passing
-and mmap(MAP_ANON).
+Privsep requires operating system support for file descriptor passing.
+Compression will be disabled on systems without a working mmap MAP_ANON.
PAM-enabled OpenSSH is known to function with privsep on Linux.
It does not function on HP-UX with a trusted system