From 624e3f2065690308adfeb8eaa88b3ee943f9eaad Mon Sep 17 00:00:00 2001 From: Ben Lindstrom Date: Sun, 23 Jun 2002 00:32:57 +0000 Subject: [PATCH] - stevesk@cvs.openbsd.org 2002/06/22 16:32:54 [sshd.8] add /var/empty in FILES section --- ChangeLog | 5 ++++- sshd.8 | 9 ++++++++- 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index d571025b7..ec7a5e0aa 100644 --- a/ChangeLog +++ b/ChangeLog @@ -12,6 +12,9 @@ - naddy@cvs.openbsd.org 2002/06/22 11:51:39 [ssh.1] typo + - stevesk@cvs.openbsd.org 2002/06/22 16:32:54 + [sshd.8] + add /var/empty in FILES section 20020622 - (djm) Update README.privsep; spotted by fries@ @@ -1021,4 +1024,4 @@ - (stevesk) entropy.c: typo in debug message - (djm) ssh-keygen -i needs seeded RNG; report from markus@ -$Id: ChangeLog,v 1.2247 2002/06/23 00:32:11 mouring Exp $ +$Id: ChangeLog,v 1.2248 2002/06/23 00:32:57 mouring Exp $ diff --git a/sshd.8 b/sshd.8 index 22f81432a..37adfae04 100644 --- a/sshd.8 +++ b/sshd.8 @@ -34,7 +34,7 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: sshd.8,v 1.184 2002/06/20 19:56:07 stevesk Exp $ +.\" $OpenBSD: sshd.8,v 1.185 2002/06/22 16:32:54 stevesk Exp $ .Dd September 25, 1999 .Dt SSHD 8 .Os @@ -578,6 +578,13 @@ These files are created using .Xr ssh-keygen 1 . .It Pa /etc/moduli Contains Diffie-Hellman groups used for the "Diffie-Hellman Group Exchange". +.It Pa /var/empty +.Xr chroot 2 +directory used by +.Nm +during privilege separation in the pre-authentication phase. +The directory should not contain any files and must be owned by root +and not group or world-writable. .It Pa /var/run/sshd.pid Contains the process ID of the .Nm