- stevesk@cvs.openbsd.org 2002/06/22 16:32:54

[sshd.8]
     add /var/empty in FILES section

ChangeLog

@@ -12,6 +12,9 @@
    - naddy@cvs.openbsd.org 2002/06/22 11:51:39
      [ssh.1]
      typo
+   - stevesk@cvs.openbsd.org 2002/06/22 16:32:54
+     [sshd.8]
+     add /var/empty in FILES section
 
 20020622
  - (djm) Update README.privsep; spotted by fries@
@@ -1021,4 +1024,4 @@
  - (stevesk) entropy.c: typo in debug message
  - (djm) ssh-keygen -i needs seeded RNG; report from markus@
 
-$Id: ChangeLog,v 1.2247 2002/06/23 00:32:11 mouring Exp $
+$Id: ChangeLog,v 1.2248 2002/06/23 00:32:57 mouring Exp $

sshd.8

@@ -34,7 +34,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: sshd.8,v 1.184 2002/06/20 19:56:07 stevesk Exp $
+.\" $OpenBSD: sshd.8,v 1.185 2002/06/22 16:32:54 stevesk Exp $
 .Dd September 25, 1999
 .Dt SSHD 8
 .Os
@@ -578,6 +578,13 @@ These files are created using
 .Xr ssh-keygen 1 .
 .It Pa /etc/moduli
 Contains Diffie-Hellman groups used for the "Diffie-Hellman Group Exchange".
+.It Pa /var/empty
+.Xr chroot 2
+directory used by
+.Nm
+during privilege separation in the pre-authentication phase.
+The directory should not contain any files and must be owned by root
+and not group or world-writable.
 .It Pa /var/run/sshd.pid
 Contains the process ID of the
 .Nm