Feature request: Allow custom directory for privilege separation in the configuration file. And change the pam module.

ramon.garcia.f at gmail.com ramon.garcia.f at gmail.com
Wed Feb 5 02:59:12 AEDT 2020


Thanks, but it did not work.  I had to place different directories for each instance. I will check it again.El 5 ago. 2019 4:46, Damien Miller <djm at mindrot.org> escribió:
>
> On Sun, 4 Aug 2019, Ramón García wrote: 
>
> > In order to be able to have different instances of sshd running in a 
> > machine (for instance, one for system administrators, other for a file 
> > transfer service) it should be useful: 
> > 
> > - To allow the administrator to specify the name of the pam module, so 
> > that one can create a customized file in /etc/pam.d 
> > - A customized privilege separation directory. 
>
> Why do you need this? It just needs to be an empty directory that the 
> sshd privsep process has no write access to. It's completely fine to 
> share them between instances. 
>
> -d


More information about the openssh-unix-dev mailing list