summaryrefslogtreecommitdiff
path: root/security/openssh
diff options
context:
space:
mode:
authoritojun <itojun@pkgsrc.org>2002-06-25 12:18:40 +0000
committeritojun <itojun@pkgsrc.org>2002-06-25 12:18:40 +0000
commitc6cfd1659a021f77e4d93e0ccc5504d23f252cb0 (patch)
treec0a6ddd0b68fb87e6fc1bfa77cff6a45cdea969f /security/openssh
parent91a1c884178fca8d084f4de527aed1af45eaf42d (diff)
downloadpkgsrc-c6cfd1659a021f77e4d93e0ccc5504d23f252cb0.tar.gz
warn that UsePrivilegeSeparation has to be yes.
Diffstat (limited to 'security/openssh')
-rw-r--r--security/openssh/MESSAGE7
1 files changed, 4 insertions, 3 deletions
diff --git a/security/openssh/MESSAGE b/security/openssh/MESSAGE
index b5a93b6d815..3d11d140107 100644
--- a/security/openssh/MESSAGE
+++ b/security/openssh/MESSAGE
@@ -1,5 +1,5 @@
==========================================================================
-$NetBSD: MESSAGE,v 1.4 2002/06/25 12:17:54 itojun Exp $
+$NetBSD: MESSAGE,v 1.5 2002/06/25 12:18:40 itojun Exp $
*===* NOTICE *===*
@@ -9,8 +9,9 @@ The config files for ${PKGNAME} must be located in:
and the example files are located in ${EGDIR}.
-You need to create UID sshd, and GID sshd, for privilege separation.
-For exapmle, add the following into /etc/passwd and /etc/group:
+You need to create UID sshd, and GID sshd, for privilege separation. For
+security reasons, UsePrivilegeSeparation has to be yes (the default value).
+For example, add the following into /etc/passwd and /etc/group:
sshd:*:16:16:sshd privsep:/var/chroot/sshd:/sbin/nologin
sshd:*:16: