AIX and Privsep.

[Darren Tucker]

Jan-Frode Myklebust wrote:
> But it doesn't default to compat like it should (?) if you log in via
> pubkey:

Gotcha. If you're going to set it for pubkey I guess the only sane thing
you can use is "compat" since it's the default.

> Preferably I'd like OpenSSH to call setpenv() to set up the full AIX
> evironment, but I don't know if that can work since setpenv() will
> execute the users shell and not limit itself to setting the
> environment variables.

Didn't we just go down that path?
http://bugzilla.mindrot.org/show_bug.cgi?id=261

Or are we talking about replacing wherever sshd exec's the shell with
setpenv()?

-- 
Darren Tucker (dtucker at zip.com.au)
GPG Fingerprint D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.