non-root SSHD

Darren Tucker dtucker at
Wed Sep 11 22:02:09 AEST 2019

On Wed, 11 Sep 2019 at 21:51, Parag Chinchole <pchinchole at> wrote:
> Does OpenSSH allow unprivileged SSH daemon?

Yes, with some caveats. When we run the regression tests (ie "make
tests) without sudo, these run entirely without privilege.

The caveats I can think of are:
 - on most platforms password authentication requires privileges to
read the password file or invoke PAM to do so.  The tests use only key
 - binding to low port numbers requires privileges on many platforms.
- on some platforms allocationg a psudeoterminal requires privileges.

As I said last time this came up
( the
two-process (privsep) use case with an unprivileged user should be a
supported configuration.

Darren Tucker (dtucker at
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860  37F4 9357 ECEF 11EA A6FA (new)
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

More information about the openssh-unix-dev mailing list