Privilege separation

[Markus Friedl]

On Wed, Oct 29, 2003 at 09:01:14PM +1100, Darren Tucker wrote:
> Logu wrote:
> > I do not understand why there is a runtime option not to use privilege
> > separation. What if the previlege separation is made compulsary.
> 
> Not all platforms and configurations work with privsep.  (Example:
> *really* early Linuxes have a broken mmap(), so Compression isn't usable
> with privilege separation.)
> 
> It also increases the memory footprint (2 sshd's per connection rather
> than 1), this may make a difference on heavily-loaded or memory-starved
> machines.

I'd rather make compression a compile time options. that's trivial...