sandox or non-root for single user

[Igor Bukanov]

Hi,

If I need to provide an ssh access just for a single user and I want
to minimize a chance of malicious code running as root even if it
increases a possibility for malicious code running as that user. Given
that should I try running sshd as that user? Or should I continue to
use UsePrivilegeSeparation=sandbox with sshd running as root?

thanks, Igor Bukanov