[openssh-commits] [openssh] branch master updated: tweak previous

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a commit to branch master
in repository openssh.

The following commit(s) were added to refs/heads/master by this push:
     new 01ed1c648 tweak previous
01ed1c648 is described below

commit 01ed1c648a2c42e85e73cac3b7647f1cddc4abba
Author: Damien Miller <djm at mindrot.org>
AuthorDate: Fri Jul 3 12:49:26 2026 +1000

    tweak previous
---
 README.privsep | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.privsep b/README.privsep
index 8244d2521..79617d903 100644
--- a/README.privsep
+++ b/README.privsep
@@ -1,7 +1,7 @@
 Privilege separation, or privsep, is a method in OpenSSH by which
 operations that require root privilege are performed by a separate
 privileged monitor process. Its purpose is to prevent privilege
-escalation by:
+escalation and mitigate attacks by:
 
  - reducing the privileged attack surface by performing most
    operations with untrusted data in unprivileged code,
@@ -82,7 +82,7 @@ PerSourcePenalties controls.
 |                 |  sshd-session (postauth monitor)  |         |
 |                 +---------------++------------------+         |
 |                                 ||                            |
-|                                 || fork+exec                  |
+|                                 || fork                       |
 |                                 ||                            |
 | network socket   +--------------++---------------+            |
 |      \-----------+  sshd-session (unprivileged)  |            |

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.