This is the mail archive of the
cygwin
mailing list for the Cygwin project.
openssh: privilege separation no longer supported on Cygwin?
- From: Houder <houder at xs4all dot nl>
- To: cygwin at cygwin dot com
- Date: Mon, 29 May 2017 07:23:09 +0200
- Subject: openssh: privilege separation no longer supported on Cygwin?
- Authentication-results: sourceware.org; auth=none
Hi,
Privilege separation in sshd defaults to "sandbox" (as far as
I understand, "openssh" has implemented a new mechanism).
... now I remember Corinna writing, that 'sandbox will not be
an option for Cygwin' ... or words to that effect.
Does this mean, that under Cygwin, privilege separation is no
longer possible?
... because, that is, I think, what I am seeing:
- the userid of child sshd is still 'cyg_server' ...
- and I get an elevated shell when I login ...
Not what I expected ...
Gr. Henri
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple