X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=OamB9SVvefSvuHWf
	O6gIHRgl2a1AWtfMHbd+489g/qtS5mmxaLVLffLxfHSyEyTJubUxyQ/42XgVQ4fT
	HnEQ02Vkc6GJYgt4agTjcTjSuanxdMZsQz6EcwUdEOjqz0COgqg5P6AG5KAPnvbQ
	iwr8M1c1Ocp3wjXmGTu6HGtRRBg=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; s=default; bh=ZpeRdnE9o0++QCfYE+N0ba
	s+AgE=; b=UXe2gzQfy5Mk1JNkv8UeqCGqDN4+R+5VFXUOKxgL3xMCDgd/45v6i8
	AWQfphnIJU0TDTvZyXxCNGoM0TntBX5hNGqEp7NSdJrft3aYY8+4BwloNQEi4dI6
	uDPU7jIE/lFZiBdRra06iLIA/Z0OxGKD2PmDrLhg+AN2cIhf0gpcI=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=0.5 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,KAM_THEBAT,PLING_QUERY,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=no version=3.3.2 spammy=H*Ad:D*xs4all.nl, H*Ad:D*nl, You've, Youve
X-HELO: forward1p.cmail.yandex.net
Authentication-Results: smtp1h.mail.yandex.net; dkim=pass header.i=@yandex.ru
X-Yandex-Suid-Status: 1 0,1 0
Date: Mon, 29 May 2017 22:57:14 +0300
From: Andrey Repin <anrdaemon AT yandex DOT ru>
Reply-To: cygwin AT cygwin DOT com
Message-ID: <522816658.20170529225714@yandex.ru>
To: Houder <houder AT xs4all DOT nl>, cygwin AT cygwin DOT com
Subject: Re: openssh: privilege separation no longer supported on Cygwin? SURPRISE!
In-Reply-To: <b16023ad6735108510ae351a8378a420@xs4all.nl>
References: <d436698bbd53eef3cbdda788d4926109 AT xs4all DOT nl>   <37b863f6-ce5c-ef13-569f-8044fe485075 AT gmail DOT com>  <20e2702ca3837f5d54c558f8e786c717 AT xs4all DOT nl>  <b16023ad6735108510ae351a8378a420 AT xs4all DOT nl>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes

Greetings, Houder!

>   - however, the userid of the grandchild of the sshd listener, is STILL
>     cyg_server ... NOT sshd!

Exactly. cyg_server is the user which does impersonation.
You've been told that when you've been setting up your host.

> As if the "sshd" account is NEVER, NEVER used during the _whole_ process
> (that is, there is NO privilege separation, as far as I can tell).

As far as it is documented.


-- 
With best regards,
Andrey Repin
Monday, May 29, 2017 22:56:04

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple