| README.privsep (126274) | README.privsep (137015) |
|---|---|
| 1Privilege separation, or privsep, is method in OpenSSH by which 2operations that require root privilege are performed by a separate 3privileged monitor process. Its purpose is to prevent privilege 4escalation by containing corruption to an unprivileged process. 5More information is available at: 6 http://www.citi.umich.edu/u/provos/ssh/privsep.html 7 8Privilege separation is now enabled by default; see the --- 28 unchanged lines hidden (view full) --- 37 38Privsep requires operating system support for file descriptor passing. 39Compression will be disabled on systems without a working mmap MAP_ANON. 40 41PAM-enabled OpenSSH is known to function with privsep on Linux. 42It does not function on HP-UX with a trusted system 43configuration. 44 | 1Privilege separation, or privsep, is method in OpenSSH by which 2operations that require root privilege are performed by a separate 3privileged monitor process. Its purpose is to prevent privilege 4escalation by containing corruption to an unprivileged process. 5More information is available at: 6 http://www.citi.umich.edu/u/provos/ssh/privsep.html 7 8Privilege separation is now enabled by default; see the --- 28 unchanged lines hidden (view full) --- 37 38Privsep requires operating system support for file descriptor passing. 39Compression will be disabled on systems without a working mmap MAP_ANON. 40 41PAM-enabled OpenSSH is known to function with privsep on Linux. 42It does not function on HP-UX with a trusted system 43configuration. 44 |
| 45On Compaq Tru64 Unix, only the pre-authentication part of privsep is 46supported. Post-authentication privsep is disabled automatically (so 47you won't see the additional process mentioned below). | 45On Cygwin, Tru64 Unix, OpenServer, and Unicos only the pre-authentication 46part of privsep is supported. Post-authentication privsep is disabled 47automatically (so you won't see the additional process mentioned below). |
| 48 49Note that for a normal interactive login with a shell, enabling privsep 50will require 1 additional process per login session. 51 52Given the following process listing (from HP-UX): 53 54 UID PID PPID C STIME TTY TIME COMMAND 55 root 1005 1 0 10:45:17 ? 0:08 /opt/openssh/sbin/sshd -u0 56 root 6917 1005 0 15:19:16 ? 0:00 sshd: stevesk [priv] 57 stevesk 6919 6917 0 15:19:17 ? 0:03 sshd: stevesk@2 58 stevesk 6921 6919 0 15:19:17 pts/2 0:00 -bash 59 60process 1005 is the sshd process listening for new connections. 61process 6917 is the privileged monitor process, 6919 is the user owned 62sshd process and 6921 is the shell process. 63 | 48 49Note that for a normal interactive login with a shell, enabling privsep 50will require 1 additional process per login session. 51 52Given the following process listing (from HP-UX): 53 54 UID PID PPID C STIME TTY TIME COMMAND 55 root 1005 1 0 10:45:17 ? 0:08 /opt/openssh/sbin/sshd -u0 56 root 6917 1005 0 15:19:16 ? 0:00 sshd: stevesk [priv] 57 stevesk 6919 6917 0 15:19:17 ? 0:03 sshd: stevesk@2 58 stevesk 6921 6919 0 15:19:17 pts/2 0:00 -bash 59 60process 1005 is the sshd process listening for new connections. 61process 6917 is the privileged monitor process, 6919 is the user owned 62sshd process and 6921 is the shell process. 63 |
| 64$Id: README.privsep,v 1.13 2003/11/21 12:48:55 djm Exp $ | 64$Id: README.privsep,v 1.14 2004/06/28 03:50:36 tim Exp $ |