From 706eefb66fa9f4be5d6753761e4119b997c46b70 Mon Sep 17 00:00:00 2001 From: des Date: Fri, 28 Jun 2013 09:55:00 +0000 Subject: [PATCH] Insta-MFH (r252338): update docs to reflect correct default privsep setting git-svn-id: svn://svn.freebsd.org/base/stable/9@252339 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f --- crypto/openssh/sshd_config | 2 +- crypto/openssh/sshd_config.5 | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/crypto/openssh/sshd_config b/crypto/openssh/sshd_config index cfd2bda10..6e3063765 100644 --- a/crypto/openssh/sshd_config +++ b/crypto/openssh/sshd_config @@ -105,7 +105,7 @@ #PrintLastLog yes #TCPKeepAlive yes #UseLogin no -#UsePrivilegeSeparation sandbox +#UsePrivilegeSeparation yes #PermitUserEnvironment no #Compression delayed #ClientAliveInterval 0 diff --git a/crypto/openssh/sshd_config.5 b/crypto/openssh/sshd_config.5 index 3f34bedc9..5e3e28992 100644 --- a/crypto/openssh/sshd_config.5 +++ b/crypto/openssh/sshd_config.5 @@ -1169,7 +1169,7 @@ the privilege of the authenticated user. The goal of privilege separation is to prevent privilege escalation by containing any corruption within the unprivileged processes. The default is -.Dq sandbox . +.Dq yes . If .Cm UsePrivilegeSeparation is set to -- 2.45.0