> 14. 8. 2015 v 2:15, Alex Wilson <[email protected]>:
> 
>> Jan Vlach <[email protected]> wrote:
>> 
>> Seems that this little pkgsrc patch (sshd-patch.c) is the culprit, am I 
>> misreading that
>> privsep is disabled for all platforms except for interix? (this is in
>> joyent pkgsrc git and also in upstream pkgsrc)
> 
> Ah, my bad, I thought you were referring to SunSSH. And that is a... very 
> interesting patch.
> 
> I suspect it's supposed to be around the other way -- disable privsep on 
> INTERIX and leave the default for other platforms at -1.
> 
> In fact, if you look through the version history, the old version of that 
> INTERIX patch (before the update to OpenSSH 4.4) was:
> 
> 
> +#ifdef HAVE_INTERIX
> +             use_privsep = 0;
> +#else
>               use_privsep = 1;
> +#endif
> 
> Which looks much more sensible. So yes, it seems like pkgsrc OpenSSH has had 
> privsep disabled by default since October 2006, because the update commit 
> mis-merged that patch.

Definitely a mistake in the 2006 commit, when the code being patched moved to a 
different source file. I’ll pursue a fix in upstream pkgsrc.

-F

-------------------------------------------
smartos-discuss
Archives: https://www.listbox.com/member/archive/184463/=now
RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00
Modify Your Subscription: 
https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb
Powered by Listbox: http://www.listbox.com

Reply via email to