[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: privsep checking

> Is there some method to verify that sshd is running in privsep mode?

Do a non-root ssh to the machine in question.

On the machine in question, see if ps shows two entries for that connection:

Like this:

deraadt   4676  0.0  0.0   400  1040 ??  I     Thu10PM    0:00.01 sshd: deraadt@ttyp0 (sshd)
root      9269  0.0  0.0   396  1228 ??  Is    Thu10PM    0:00.03 sshd: deraadt [priv] (sshd)


See the [priv]?

That's your sign.