Skip site navigation (1)Skip section navigation (2)
Date:      25 Jun 2002 09:26:33 +0200
From:      Jan Lentfer <Jan.Lentfer@web.de>
To:        patpro <patpro@patpro.net>
Cc:        FreeBSD Security Maillinglist <freebsd-security@FreeBSD.ORG>
Subject:   Re: How to check if "UsePrivilegeSeparation" works in OpenSSH?
Message-ID:  <1024989993.2078.20.camel@jan-linnb.lan>
In-Reply-To: <E59ABC95-880A-11D6-919D-0030654D97EC@patpro.net>
References:  <E59ABC95-880A-11D6-919D-0030654D97EC@patpro.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Am Die, 2002-06-25 um 09.12 schrieb patpro:

> just log in (via ssh of course) and type :
> 
> $ ps -aux | grep sshd | grep -v grep
> 
> and make sure it gives something like this :
> 
> root     178  0.0  1.3  2088 1180  ??  Is  4:40PM  0:00.20 /usr/local/sbin/
> sshd
> root   61294  0.0  1.8  4868 1656  ??  I   8:21AM  0:00.05 sshd: patpro 
> [priv] (sshd)
> patpro 61296  0.0  1.9  5000 1744  ??  S   8:21AM  0:00.14 sshd: patpro@ 
> ttyp0 (sshd)
> 
> 
> first process : regular sshd daemon,
> second : spawned root limited process,
> third : active process with limited privileges. (spawned from the 2nd 
> process if I understand correctly)

Thanks a lot, I guess I have it working then, since I see the same on my
box now. Maybe I am on the safe side now for longer than 2 weeks :-). I
have Diploma exams in a few weeks - it seems like exploits always WAIT
to come out when I REALLY don't have time :-)

Thanks again,

Jan


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1024989993.2078.20.camel>