Re: privsep checking

[Theo de Raadt <deraadt@cvs.openbsd.org>]

> In message <Pine.BSO.4.44.0206240926370.5693-100000@heorot.stanford.edu>
> 	so spake Ted U (grendel):
> 
> > Is there some method to verify that sshd is running in privsep mode?
> 
> For each ssh connection you will see a privileged process running as root
> and another running as the user.  E.g.
> 
> anoncvs % ps auxwwwg | g sshd
> root      5181  0.0  0.0   372  1108 ??  Is    10:41PM    0:00.07 sshd: anoncvs [priv] (sshd)
> anoncvs  20885  0.0  0.0   804  1376 ??  S     10:41PM    0:01.92 sshd: anoncvs@notty (sshd)

Except for root logins.  Root logins are special.