Subject: Re: HEADS UP: sshd privilege separation code enabled
To: None <current-users@netbsd.org>
From: None <itojun@iijlab.net>
List: current-users
Date: 05/17/2002 05:59:59
> privilege separation code is now enabled by default for in-tree sshd.
> you need to modify /etc to use this:
> - sshd uid/gid
> - /var/empty directory, which is empty
> if they do not exit, sshd will refuse to let you log in.
> normal build process will dig /var/empty. you will need to dig sshd
> uid/gid by modifying /etc. postinstall checks these and barks if
> they are not available.
directory pathname changed, so read: /var/empty -> /var/chroot/sshd
normal build process will dig it.
itojun