Re: privsep checking

[Lars Hansson <lars@unet.net.ph>]

On Mon, 24 Jun 2002 20:04:26 -0600
"Theo de Raadt" <deraadt@cvs.openbsd.org> wrote:

> > Is there some method to verify that sshd is running in privsep mode?
> 
> Do a non-root ssh to the machine in question.
> 
> On the machine in question, see if ps shows two entries for that connection:
> 
> Like this:
> 
> deraadt   4676  0.0  0.0   400  1040 ??  I     Thu10PM    0:00.01 sshd: deraadt@ttyp0 (sshd)
> root      9269  0.0  0.0   396  1228 ??  Is    Thu10PM    0:00.03 sshd: deraadt [priv] (sshd)
> 
> 
> See the [priv]?
> 
> That's your sign.

A slightly related question:
Does privsep work differently on pre-3.1 systems?
I dont see any sshd processes with [priv] on my updated 2.9 and 3.0 systems.

---
Lars Hansson