Cygwin OpenSSH 3.4 privilege separation issues
Chris Metcalf
metcalf@incert.com
Thu Jun 27 09:35:00 GMT 2002
I upgraded from running OpenSSH 3.3 with privilege separation to running
OpenSSH 3.4 and it no longer starts up correctly as a service;
/var/log/sshd.log holds "Bad owner or mode for /var/empty". I've done a
"chown 0 /var/empty; chmod 700 /var/empty" which should match the checking
code in sshd.c, but for some reason it doesn't appear to. (A small
cut-and-paste of the /var/empty checking code from sshd.c into a separate
program doesn't issue the warning.) So this is a puzzle.
Of course, "uid 0" is Everyone, and what we really want here is a check
that /var/empty is owned by SYSTEM (uid 18). This is really a bigger
issue; we shouldn't be relying on uid 0 to be special under Cygwin.
Meanwhile I've flipped UsePrivilegeSeparation back off for now, but we
should get these issues fixed so we can use privilege separation.
Chris Metcalf -- InCert Software -- 1 (617) 621 8080
metcalf@incert.com -- http://www.incert.com/~metcalf
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Bug reporting: http://cygwin.com/bugs.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/
More information about the Cygwin
mailing list