From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: sshd privsep user still required?
Date: Thu, 17 Jan 2019 14:23:00 -0000 [thread overview]
Message-ID: <20190117142307.GH4167@calimero.vinschen.de> (raw)
In-Reply-To: <CANV9t=S6LFnDSKiJsL3GpjLNC+srJCAgkScZTiG0yAbxq3b40A@mail.gmail.com>
[-- Attachment #1: Type: text/plain, Size: 742 bytes --]
On Jan 16 15:31, Bill Stewart wrote:
> I installed the OpenSSH server as a service using ssh-host-config, and all
> is working.
>
> I'm running Windows 10 (1803).
>
> I renamed the sshd privilege separation (privsep) account to something else
> and restarted the sshd service.
>
> Everything still works - no errors.
>
> Is the sshd disabled user account still required?
No, actually it isn't. These days the sshd server checks if the
the privsep chrrot environment should be used and that the process
is started under "root:root". This never matches under Cygwin so
we could drop the sshd user requirement.
Patches to the installer script are very welcome.
Corinna
--
Corinna Vinschen
Cygwin Maintainer
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
next prev parent reply other threads:[~2019-01-17 14:23 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-01-16 22:31 Bill Stewart
2019-01-17 14:23 ` Corinna Vinschen [this message]
2019-01-17 23:04 ` Charles Russell
2019-03-12 22:21 ` Bill Stewart
2019-03-13 8:56 ` Corinna Vinschen
2019-03-13 15:12 ` Bill Stewart
2019-03-13 15:29 ` Corinna Vinschen
2019-03-13 15:58 ` Bill Stewart
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190117142307.GH4167@calimero.vinschen.de \
--to=corinna-cygwin@cygwin.com \
--cc=cygwin@cygwin.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).