X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=OamB9SVvefSvuHWf
	O6gIHRgl2a1AWtfMHbd+489g/qtS5mmxaLVLffLxfHSyEyTJubUxyQ/42XgVQ4fT
	HnEQ02Vkc6GJYgt4agTjcTjSuanxdMZsQz6EcwUdEOjqz0COgqg5P6AG5KAPnvbQ
	iwr8M1c1Ocp3wjXmGTu6HGtRRBg=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; s=default; bh=ZpeRdnE9o0++QCfYE+N0ba
	s+AgE=; b=UXe2gzQfy5Mk1JNkv8UeqCGqDN4+R+5VFXUOKxgL3xMCDgd/45v6i8
	AWQfphnIJU0TDTvZyXxCNGoM0TntBX5hNGqEp7NSdJrft3aYY8+4BwloNQEi4dI6
	uDPU7jIE/lFZiBdRra06iLIA/Z0OxGKD2PmDrLhg+AN2cIhf0gpcI=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=0.5 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,KAM_THEBAT,PLING_QUERY,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=no version=3.3.2 spammy=H*Ad:D*xs4all.nl, H*Ad:D*nl, You've, Youve
X-HELO:	forward1p.cmail.yandex.net
Authentication-Results:	smtp1h.mail.yandex.net; dkim=pass header.i=@yandex.ru
X-Yandex-Suid-Status:	1 0,1 0
Date:	Mon, 29 May 2017 22:57:14 +0300
From:	Andrey Repin <anrdaemon AT yandex DOT ru>
Reply-To:	cygwin AT cygwin DOT com
Message-ID:	<522816658.20170529225714@yandex.ru>
To:	Houder <houder AT xs4all DOT nl>, cygwin AT cygwin DOT com
Subject:	Re: openssh: privilege separation no longer supported on Cygwin? SURPRISE!
In-Reply-To:	<b16023ad6735108510ae351a8378a420@xs4all.nl>
References:	<d436698bbd53eef3cbdda788d4926109 AT xs4all DOT nl> <37b863f6-ce5c-ef13-569f-8044fe485075 AT gmail DOT com> <20e2702ca3837f5d54c558f8e786c717 AT xs4all DOT nl> <b16023ad6735108510ae351a8378a420 AT xs4all DOT nl>
MIME-Version:	1.0
X-IsSubscribed:	yes

Greetings, Houder!

>   - however, the userid of the grandchild of the sshd listener, is STILL
>     cyg_server ... NOT sshd!

Exactly. cyg_server is the user which does impersonation.
You've been told that when you've been setting up your host.

> As if the "sshd" account is NEVER, NEVER used during the _whole_ process
> (that is, there is NO privilege separation, as far as I can tell).

As far as it is documented.


-- 
With best regards,
Andrey Repin
Monday, May 29, 2017 22:56:04

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -