X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:to:from:subject:date:message-id:references :mime-version:content-type:content-transfer-encoding :in-reply-to; q=dns; s=default; b=KjV6oi5tEc/doAw6Rjhu94qo5zOa0y U/UXUhw8X1ZzJ5qPx+uKgH6TlTf1uPuREMeSYIIffySX12IsetTWO7vlPXmUmxdt uvuo6KvqAZ+hz7Wo9bAVJu3tgt1FL/u1da8HzoqG0j1ZdDOiUx3vcY3HvlFot3ao N9LlR89v2R7d0= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:to:from:subject:date:message-id:references :mime-version:content-type:content-transfer-encoding :in-reply-to; s=default; bh=Ferk18fOuDuL3Sh2gUVSwnFO+LE=; b=SI9L 7vSVrPUm9s/1IUeIpmiIo31urpfO2tkdHot617154DovKFkns2qUjeUNvb1DFNwA CPUQFCOiniUtCDSFYExqEaaz0wOScw/q7fNgVp9nytwTp8wyWTDciBWvWVPnXkwZ WZC9bbvZFY9zmqxkxv6JmXGYdDSQb5PF7bh1BfQ= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=1.4 required=5.0 tests=BAYES_00,FORGED_MUA_MOZILLA,FREEMAIL_FROM,KAM_LAZY_DOMAIN_SECURITY autolearn=no version=3.3.2 spammy=H*r:Unknown, H*r:4.84_2 X-HELO: blaine.gmane.org To: cygwin AT cygwin DOT com From: Charles Russell Subject: Re: sshd privsep user still required? Date: Thu, 17 Jan 2019 17:03:59 -0600 Lines: 26 Message-ID: References: <20190117142307 DOT GH4167 AT calimero DOT vinschen DOT de> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.4.0 In-Reply-To: <20190117142307.GH4167@calimero.vinschen.de> X-IsSubscribed: yes On 1/17/2019 8:23 AM, Corinna Vinschen wrote: > On Jan 16 15:31, Bill Stewart wrote: >> I installed the OpenSSH server as a service using ssh-host-config, and all >> is working. >> >> I'm running Windows 10 (1803). >> >> I renamed the sshd privilege separation (privsep) account to something else >> and restarted the sshd service. >> >> Everything still works - no errors. >> >> Is the sshd disabled user account still required? > > No, actually it isn't. These days the sshd server checks if the > the privsep chrrot environment should be used and that the process > is started under "root:root". This never matches under Cygwin so > we could drop the sshd user requirement. > > Patches to the installer script are very welcome. > > > Corinna > Can the superfluous account be deleted without having to reinstall sshd? -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple