Nathan Angelacos wrote:
> 
> >I'm curious about /etc/group modification?
> >
> >I've upgraded two (2) potato's and two (2) woody's.  Yes, there is a
> >new user in passwd/shadow; but, I do not have any new group for
> >sshd.
> >
> >Yes, I have seen the instructions for installing manually; but, I
> >cannot find a reason for the special group.
> >
> >What do you think?
> 
> Good question.  I wondered the same thing, figured "'cause Theo said
> so.." and dismissed it.  But after you asked, I checked the source...
> :-)
> 
> sshd.c in privsep_preauth_child does a setgid() from the sshd's
> primary group (in passwd) when setting up the chroot jail.  The
> manual instructions make sure that the uid:gid is sshd:sshd.
> So I guess "'cause Theo said so" works. :-)
> 
> I'm curious though, on your debian systems, what is the gid for the
> sshd user?  The sshd.c source seems to indicate that sshd will fail
> if the group doesn't exist.

Precisely my point!  sshd is working without incident on all of these
boxen.  I thought the same as you, that this should fail of give me some
kind of error log; but, I haven't found anything wrong and I've been
using it for nearly a week now ;<

How can I check which gid it's using, since once it's successfully
logged in it resorts to root?

What do you think?

-- 

Best Regards,

mds
mds resource
888.250.3987

Dare to fix things before they break . . .

Our capacity for understanding is inversely proportional to how much we
think we know.  The more I know, the more I know I don't know . . .


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
No, I will not fix your computer.
http://thinkgeek.com/sf

_______________________________________________
Leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to