From: tim Date: Wed, 26 Jun 2002 00:25:47 +0000 (+0000) Subject: UnixWare tip is no longer needed. X-Git-Tag: V_3_4_P1~17 X-Git-Url: http://andersk.mit.edu/gitweb/openssh.git/commitdiff_plain/f2d9a1f82ed99c4db97961cf679a27acf82049f7 UnixWare tip is no longer needed. --- diff --git a/ChangeLog b/ChangeLog index b174ee13..82a3c77d 100644 --- a/ChangeLog +++ b/ChangeLog @@ -29,6 +29,7 @@ - (tim) [Makefile.in] fix test on installing ssh-rand-helper.8 - (bal) added back in error check for mmap(). I screwed up, Pointed out by stevesk@ + - (tim) [README.privsep] UnixWare tip no longer needed. 20020625 - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh diff --git a/README.privsep b/README.privsep index abf58674..94f3dd64 100644 --- a/README.privsep +++ b/README.privsep @@ -23,9 +23,6 @@ prepare the privsep preauth environment: # groupadd sshd # useradd -g sshd -c 'sshd privsep' -d /var/empty sshd -If you are on UnixWare 7 or OpenUNIX 8 do this additional step. - # ln /usr/lib/.ns.so /usr/lib/ns.so.1 - /var/empty should not contain any files. configure supports the following options to change the default @@ -34,8 +31,8 @@ privsep user and chroot directory: --with-privsep-path=xxx Path for privilege separation chroot --with-privsep-user=user Specify non-privileged user for privilege separation -Privsep requires operating system support for file descriptor passing -and mmap(MAP_ANON). +Privsep requires operating system support for file descriptor passing. +Compression will be disabled on systems without a working mmap MAP_ANON. PAM-enabled OpenSSH is known to function with privsep on Linux. It does not function on HP-UX with a trusted system