summaryrefslogtreecommitdiffstats
path: root/crypto
diff options
context:
space:
mode:
authordes <des@FreeBSD.org>2013-06-28 09:41:59 +0000
committerdes <des@FreeBSD.org>2013-06-28 09:41:59 +0000
commit5794e02a5ac98503d6a7a66249d68dbd1c100388 (patch)
tree76f872a2d333306046a8fc761c9d03058e3e266b /crypto
parente3d9c74722929192746e08f01762ff752e3fa532 (diff)
downloadFreeBSD-src-5794e02a5ac98503d6a7a66249d68dbd1c100388.zip
FreeBSD-src-5794e02a5ac98503d6a7a66249d68dbd1c100388.tar.gz
r251088 reverted the default value for UsePrivilegeSeparation from
"sandbox" to "yes", but did not update the documentation to match.
Diffstat (limited to 'crypto')
-rw-r--r--crypto/openssh/sshd_config2
-rw-r--r--crypto/openssh/sshd_config.52
2 files changed, 2 insertions, 2 deletions
diff --git a/crypto/openssh/sshd_config b/crypto/openssh/sshd_config
index cfd2bda..6e30637 100644
--- a/crypto/openssh/sshd_config
+++ b/crypto/openssh/sshd_config
@@ -105,7 +105,7 @@
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
-#UsePrivilegeSeparation sandbox
+#UsePrivilegeSeparation yes
#PermitUserEnvironment no
#Compression delayed
#ClientAliveInterval 0
diff --git a/crypto/openssh/sshd_config.5 b/crypto/openssh/sshd_config.5
index 3f34bed..5e3e289 100644
--- a/crypto/openssh/sshd_config.5
+++ b/crypto/openssh/sshd_config.5
@@ -1169,7 +1169,7 @@ the privilege of the authenticated user.
The goal of privilege separation is to prevent privilege
escalation by containing any corruption within the unprivileged processes.
The default is
-.Dq sandbox .
+.Dq yes .
If
.Cm UsePrivilegeSeparation
is set to
OpenPOWER on IntegriCloud