> Jan Vlach <[email protected]> wrote:
>
> Seems that this little pkgsrc patch (sshd-patch.c) is the culprit, am I
> misreading that
> privsep is disabled for all platforms except for interix? (this is in
> joyent pkgsrc git and also in upstream pkgsrc)
Ah, my bad, I thought you were referring to SunSSH. And that is a... very
interesting patch.
I suspect it's supposed to be around the other way -- disable privsep on
INTERIX and leave the default for other platforms at -1.
In fact, if you look through the version history, the old version of that
INTERIX patch (before the update to OpenSSH 4.4) was:
+#ifdef HAVE_INTERIX
+ use_privsep = 0;
+#else
use_privsep = 1;
+#endif
Which looks much more sensible. So yes, it seems like pkgsrc OpenSSH has had
privsep disabled by default since October 2006, because the update commit
mis-merged that patch.
-------------------------------------------
smartos-discuss
Archives: https://www.listbox.com/member/archive/184463/=now
RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00
Modify Your Subscription:
https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb
Powered by Listbox: http://www.listbox.com
