Lines Matching +full:pre +full:- +full:its
3 privileged monitor process. Its purpose is to prevent privilege
8 Privilege separation is now mandatory. During the pre-authentication
9 phase sshd will chroot(2) to "/var/empty" and change its privileges to the
10 "sshd" user and its primary group. sshd is a pseudo-account that should
21 # useradd -g sshd -c 'sshd privsep' -d /var/empty -s /bin/false sshd
28 --with-privsep-path=xxx Path for privilege separation chroot
29 --with-privsep-user=user Specify non-privileged user for privilege separation
31 PAM-enabled OpenSSH is known to function with privsep on AIX, FreeBSD,
32 HP-UX (including Trusted Mode), Linux, NetBSD and Solaris.
34 On Cygwin, Tru64 Unix and OpenServer only the pre-authentication part
35 of privsep is supported. Post-authentication privsep is disabled
41 Given the following process listing (from HP-UX):
44 root 1005 1 0 10:45:17 ? 0:08 /opt/openssh/sbin/sshd -u0
47 stevesk 6921 6919 0 15:19:17 pts/2 0:00 -bash