Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-ID: <4123D9A9.3000503@acm.org>
Date: Wed, 18 Aug 2004 15:35:21 -0700
From: David Rothenberger <daveroth AT acm DOT org>
User-Agent: Mozilla Thunderbird 0.7.3 (Windows/20040803)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: upgrading openssh 3.8.1p1-1 -> 3.9p1-1 breaks privilege separation
References: <87n00siknk DOT fsf AT beth DOT swift DOT xxx> <20040818152348 DOT GI10590 AT cygbert DOT vinschen DOT de> <4123ACA8 DOT 1010801 AT acm DOT org> <20040818215944 DOT GT10590 AT cygbert DOT vinschen DOT de>
In-Reply-To: <20040818215944.GT10590@cygbert.vinschen.de>
X-Enigmail-Version: 0.85.0.0
X-Enigmail-Supports: pgp-inline, pgp-mime
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Authentication-Info: Submitted using SMTP AUTH at out002.verizon.net from [216.34.91.132] at Wed, 18 Aug 2004 17:35:21 -0500
X-IsSubscribed: yes
Reply-To: cygwin AT cygwin DOT com

On 8/18/2004 2:59 PM, Corinna Vinschen wrote:

> On Aug 18 12:23, David Rothenberger wrote:
> 
>>On 8/18/2004 8:23 AM, Corinna Vinschen wrote:
>>
>>I did not experience this problem when I upgraded and I thought that I 
>>had privilege separation enabled.  Is there any easy way to tell if it 
>>is on or not?
> 
> 
> You mean, other than looking into /etc/sshd_config?

Yes.  As far as I know, everything is configured to use privilege 
separation.  But the fact that 3.9p1-1 worked for me without adding the 
-r switch made me wonder whether sshd was really doing privilege 
separation.  Is there any debugging output that indicates privsep is in 
use?  Can I tell using ps?  Is there any way to tell for sure that it is 
being used?


-- 
David Rothenberger                spammer? -> spam AT daveroth DOT dyndns DOT org
GPG/PGP: 0x7F67E734, C233 365A 25EF 2C5F C8E1 43DF B44F BA26 7F67 E734


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/