summaryrefslogtreecommitdiff
path: root/security/openssh
diff options
context:
space:
mode:
authoritojun <itojun>2002-06-25 12:18:40 +0000
committeritojun <itojun>2002-06-25 12:18:40 +0000
commit36c3d6757ab3bb4fc4c2aeb30f85205afb9130d3 (patch)
treec0a6ddd0b68fb87e6fc1bfa77cff6a45cdea969f /security/openssh
parent4e2d9f4c1fb1e7b5c880105bd2510ac758d2d6e9 (diff)
downloadpkgsrc-36c3d6757ab3bb4fc4c2aeb30f85205afb9130d3.tar.gz
warn that UsePrivilegeSeparation has to be yes.
Diffstat (limited to 'security/openssh')
-rw-r--r--security/openssh/MESSAGE7
1 files changed, 4 insertions, 3 deletions
diff --git a/security/openssh/MESSAGE b/security/openssh/MESSAGE
index b5a93b6d815..3d11d140107 100644
--- a/security/openssh/MESSAGE
+++ b/security/openssh/MESSAGE
@@ -1,5 +1,5 @@
==========================================================================
-$NetBSD: MESSAGE,v 1.4 2002/06/25 12:17:54 itojun Exp $
+$NetBSD: MESSAGE,v 1.5 2002/06/25 12:18:40 itojun Exp $
*===* NOTICE *===*
@@ -9,8 +9,9 @@ The config files for ${PKGNAME} must be located in:
and the example files are located in ${EGDIR}.
-You need to create UID sshd, and GID sshd, for privilege separation.
-For exapmle, add the following into /etc/passwd and /etc/group:
+You need to create UID sshd, and GID sshd, for privilege separation. For
+security reasons, UsePrivilegeSeparation has to be yes (the default value).
+For example, add the following into /etc/passwd and /etc/group:
sshd:*:16:16:sshd privsep:/var/chroot/sshd:/sbin/nologin
sshd:*:16: