Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Message-ID:	<4123D9A9.3000503@acm.org>
Date:	Wed, 18 Aug 2004 15:35:21 -0700
From:	David Rothenberger <daveroth AT acm DOT org>
User-Agent:	Mozilla Thunderbird 0.7.3 (Windows/20040803)
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: upgrading openssh 3.8.1p1-1 -> 3.9p1-1 breaks privilege separation
References:	<87n00siknk DOT fsf AT beth DOT swift DOT xxx> <20040818152348 DOT GI10590 AT cygbert DOT vinschen DOT de> <4123ACA8 DOT 1010801 AT acm DOT org> <20040818215944 DOT GT10590 AT cygbert DOT vinschen DOT de>
In-Reply-To:	<20040818215944.GT10590@cygbert.vinschen.de>
X-Enigmail-Version:	0.85.0.0
X-Enigmail-Supports:	pgp-inline, pgp-mime
X-Authentication-Info:	Submitted using SMTP AUTH at out002.verizon.net from [216.34.91.132] at Wed, 18 Aug 2004 17:35:21 -0500
X-IsSubscribed:	yes
Reply-To:	cygwin AT cygwin DOT com

On 8/18/2004 2:59 PM, Corinna Vinschen wrote:

> On Aug 18 12:23, David Rothenberger wrote:
> 
>>On 8/18/2004 8:23 AM, Corinna Vinschen wrote:
>>
>>I did not experience this problem when I upgraded and I thought that I 
>>had privilege separation enabled.  Is there any easy way to tell if it 
>>is on or not?
> 
> 
> You mean, other than looking into /etc/sshd_config?

Yes.  As far as I know, everything is configured to use privilege 
separation.  But the fact that 3.9p1-1 worked for me without adding the 
-r switch made me wonder whether sshd was really doing privilege 
separation.  Is there any debugging output that indicates privsep is in 
use?  Can I tell using ps?  Is there any way to tell for sure that it is 
being used?


-- 
David Rothenberger                spammer? -> spam AT daveroth DOT dyndns DOT org
GPG/PGP: 0x7F67E734, C233 365A 25EF 2C5F C8E1 43DF B44F BA26 7F67 E734


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -