Re: User privileges separation in Debian.

2009-12-11 Thread Sthu Deus
Thank You for Your time and comprehensive answer, Joey: >ssh's privilege separation is somewhat atypical. From sshd_config(5) Do You know anything about the subject for these two services: saslauthd courierlogger authdaemond (of courier-authlib) - as they seems do not any stuff regarding the

Re: User privileges separation in Debian.

2009-12-09 Thread Joey Hess
Andrew Sackville-West wrote: > This is only a guess, so hopefully someone who knows will chime in. It > sounds like typical forking behavior to me. ssh's privilege separation is somewhat atypical. From sshd_config(5): UsePrivilegeSeparation Specifies whether sshd(8) separates pr

Re: User privileges separation in Debian.

2009-12-09 Thread Andrew Sackville-West
On Wed, Dec 09, 2009 at 08:30:40PM +0700, Sthu Deus wrote: > Good day. > > > How can I realise the subject? Say, I have SSH daemon, in Debian it > starts with root privileges from /usr/sbin/sshd. I'm not sure you *can* realize what you want. > > When connection is established (a user has succe