This is the mail archive of the
cygwin@cygwin.com
mailing list for the Cygwin project.
Cygwin OpenSSH 3.4 privilege separation issues
- From: Chris Metcalf <metcalf at incert dot com>
- To: cygwin at cygwin dot com
- Date: Thu, 27 Jun 2002 11:36:14 -0400 (EDT)
- Subject: Cygwin OpenSSH 3.4 privilege separation issues
I upgraded from running OpenSSH 3.3 with privilege separation to running
OpenSSH 3.4 and it no longer starts up correctly as a service;
/var/log/sshd.log holds "Bad owner or mode for /var/empty". I've done a
"chown 0 /var/empty; chmod 700 /var/empty" which should match the checking
code in sshd.c, but for some reason it doesn't appear to. (A small
cut-and-paste of the /var/empty checking code from sshd.c into a separate
program doesn't issue the warning.) So this is a puzzle.
Of course, "uid 0" is Everyone, and what we really want here is a check
that /var/empty is owned by SYSTEM (uid 18). This is really a bigger
issue; we shouldn't be relying on uid 0 to be special under Cygwin.
Meanwhile I've flipped UsePrivilegeSeparation back off for now, but we
should get these issues fixed so we can use privilege separation.
Chris Metcalf -- InCert Software -- 1 (617) 621 8080
metcalf@incert.com -- http://www.incert.com/~metcalf
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Bug reporting: http://cygwin.com/bugs.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/