From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 97969 invoked by alias); 30 May 2017 13:50:27 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 97957 invoked by uid 89); 30 May 2017 13:50:26 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.6 required=5.0 tests=AWL,BAYES_00,PLING_QUERY,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 spammy=H*F:D*nl, sid, surprise X-HELO: lb3-smtp-cloud2.xs4all.net Received: from lb3-smtp-cloud2.xs4all.net (HELO lb3-smtp-cloud2.xs4all.net) (194.109.24.29) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Tue, 30 May 2017 13:50:23 +0000 Received: from tmp.LgKIeWwECF ([83.162.234.136]) by smtp-cloud2.xs4all.net with ESMTP id SdqM1v00d2xEdKF01dqP6u; Tue, 30 May 2017 15:50:23 +0200 Date: Tue, 30 May 2017 16:16:00 -0000 Message-ID: <262615c8cf6e134cedf97b0280c4a68f@smtp-cloud2.xs4all.net> From: Houder To: cygwin@cygwin.com Subject: Re: openssh: privilege separation no longer supported on Cygwin? SURPRISE! References: <37b863f6-ce5c-ef13-569f-8044fe485075@gmail.com> <20e2702ca3837f5d54c558f8e786c717@xs4all.nl> In-Reply-to: Content-Type: text/plain; charset=UTF-8; format=fixed User-Agent: mua.awk 0.99 X-SW-Source: 2017-05/txt/msg00496.txt.bz2 On Mon, 29 May 2017 19:14:30, Houder wrote: [snip] > As if the "sshd" account is NEVER, NEVER used during the _whole_ process > (that is, there is NO privilege separation, as far as I can tell). .. wanted to share this experience with you. - deleted user/account 'sshd' # net user sshd /delete - modified the last part (rid?) of the sid belonging to user/account 'sshd' in xxxx (in /etc/passwd) - rebooted Before reboot, I changed 'sshd' in an automatic service (was: manual) After the system had rebooted: - 'cygrunsrv -Q sshd' shows 'sshd' running ... - 'tail -f /var/log/sshd.log' shows 'sshd' listening ... - 'net user' shows user/account 'sshd' gone ... I can still use ssh ... (both password authentication and key authentication) Yes, if I remove user/account 'sshd' completely from /etc/passwd, only then 'sshd' won't start ... Regards, Henri ===== -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple