Only one chance to enter a new password?

[Damien Miller]

Richard Dickens wrote:
> Darren,
> 
> The UsePrivilegeSeparation issue was one that I reported to this list in
> Nov 2004. It was to do with authorization messages not getting
> syslogged. Here's what you wrote at the time:
> 
> 
>>The reason it's not logged is privsep: the packet_disconnect and logit
> 
> call happen in the unprivileged child >(which is chrooted and doesn't
> have access to /dev/log).  Trying it with UsePrivilegeSeparation=no has
> the 

You should arrange for your syslogd to listen at /var/empty/dev/log
that is what OpenBSD does.

-d