delorie.com/archives/browse.cgi | search |
X-Recipient: | archive-cygwin AT delorie DOT com |
DomainKey-Signature: | a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id |
:list-unsubscribe:list-subscribe:list-archive:list-post | |
:list-help:sender:mime-version:content-type | |
:content-transfer-encoding:date:from:to:subject:in-reply-to | |
:references:message-id; q=dns; s=default; b=LqF6icbYOVP1dERm7Iuc | |
G1vSK6DSg3gJURoXMwXbSygNBR/DHcFttApl4HYl8OJAAnkIUkWmvh4r3lXtTzw+ | |
06PXm5nNs4yLM+BWvWX/gJOY2WQTwSvlTfQm3NNf0ctlRCtpGW7usj1e08gdZmY2 | |
kBHftOLDpetZIWB5b4azT5Y= | |
DKIM-Signature: | v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id |
:list-unsubscribe:list-subscribe:list-archive:list-post | |
:list-help:sender:mime-version:content-type | |
:content-transfer-encoding:date:from:to:subject:in-reply-to | |
:references:message-id; s=default; bh=gpwaKWAHisKnXDUlqrGaWw9kC9 | |
4=; b=VC+EKBzDBl4kPPwWofJmQMw+ioxJrB+Yr2LDfyLsKGEEUIr+bcpQoWoLsT | |
FrJ8+UHUhl5VrGVrGv6RikJLfuRTJvmyykcnj6TVYFNuPcrRWBdpG6jSZTLzj3kB | |
+cWnvoSurhUYBy9GeUSHYGhYUKyvkjio33ihQhqGlRlL8kTZU= | |
Mailing-List: | contact cygwin-help AT cygwin DOT com; run by ezmlm |
List-Id: | <cygwin.cygwin.com> |
List-Subscribe: | <mailto:cygwin-subscribe AT cygwin DOT com> |
List-Archive: | <http://sourceware.org/ml/cygwin/> |
List-Post: | <mailto:cygwin AT cygwin DOT com> |
List-Help: | <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs> |
Sender: | cygwin-owner AT cygwin DOT com |
Mail-Followup-To: | cygwin AT cygwin DOT com |
Delivered-To: | mailing list cygwin AT cygwin DOT com |
Authentication-Results: | sourceware.org; auth=none |
X-Virus-Found: | No |
X-Spam-SWARE-Status: | No, score=-2.5 required=5.0 tests=AWL,BAYES_00,NORMAL_HTTP_TO_IP,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 spammy=H*F:D*nl, userid, PROBLEM |
X-HELO: | lb3-smtp-cloud2.xs4all.net |
MIME-Version: | 1.0 |
Date: | Mon, 29 May 2017 11:58:20 +0200 |
From: | Houder <houder AT xs4all DOT nl> |
To: | cygwin AT cygwin DOT com |
Subject: | Re: openssh: privilege separation no longer supported on Cygwin? -- example only |
In-Reply-To: | <20e2702ca3837f5d54c558f8e786c717@xs4all.nl> |
References: | <d436698bbd53eef3cbdda788d4926109 AT xs4all DOT nl> <37b863f6-ce5c-ef13-569f-8044fe485075 AT gmail DOT com> <20e2702ca3837f5d54c558f8e786c717 AT xs4all DOT nl> |
Message-ID: | <1d30e84e3d6810c456e7264b95d67649@xs4all.nl> |
X-Sender: | houder AT xs4all DOT nl |
User-Agent: | XS4ALL Webmail |
X-IsSubscribed: | yes |
On 2017-05-29 11:48, Houder wrote: - pre-authentication: Shell 1: 64-@@ ssh -p 222 -l Henri 192.168.178.15 Enter passphrase for key '/home/Henri/.ssh/id_rsa': <==== passphrase not yet entered Shell 2: (observer) 64-@@# ps -af UID PID PPID TTY STIME COMMAND Henri 2308 4356 pty0 11:01:41 /usr/bin/ssh Henri 5092 176 pty1 11:01:58 /usr/bin/ps Henri 4356 3744 pty0 10:57:56 /usr/bin/bash Henri 3744 1 ? 10:57:50 /usr/bin/mintty-273 Henri 176 4604 pty1 10:58:21 /usr/bin/bash cyg_serv 4992 2476 ? 11:01:03 /usr/sbin/sshd privileged listener cyg_serv 2476 1 ? 11:01:03 /usr/bin/cygrunsrv Henri 4604 1 ? 10:58:21 /usr/bin/mintty-273 cyg_serv 1496 3032 ? 11:01:42 /usr/sbin/sshd should be using sshd as userid cyg_serv 3032 4992 ? 11:01:42 /usr/sbin/sshd privileged monitor (child of listener) - post-authentication: Shell 1: 64-@@ ssh -p 222 -l Henri 192.168.178.15 Enter passphrase for key '/home/Henri/.ssh/id_rsa': <==== passphrase has been entered Last login: Mon May 29 10:07:00 2017 from 192.168.178.15 64-@@# <===== ///// PROBLEM: this shell is ELEVATED ///// Shell 2: (observer) 64-@@# ps -af UID PID PPID TTY STIME COMMAND Henri 2496 3032 pty3 11:02:31 /usr/bin/bash remote shell (but it is an elevated shell! ?????) Henri 2308 4356 pty0 11:01:41 /usr/bin/ssh Henri 4356 3744 pty0 10:57:56 /usr/bin/bash Henri 3744 1 ? 10:57:50 /usr/bin/mintty-273 Henri 176 4604 pty1 10:58:21 /usr/bin/bash cyg_serv 4992 2476 ? 11:01:03 /usr/sbin/sshd privileged listener Henri 4996 176 pty1 11:06:05 /usr/bin/ps cyg_serv 2476 1 ? 11:01:03 /usr/bin/cygrunsrv Henri 4604 1 ? 10:58:21 /usr/bin/mintty-273 cyg_serv 3032 4992 ? 11:01:42 /usr/sbin/sshd privileged monitor (child of listener) ====== -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
webmaster | delorie software privacy |
Copyright © 2019 by DJ Delorie | Updated Jul 2019 |