Post #3548133
2026-07-03 02:36 UTC
A few people have asked me recently about how OpenSSH sshd implements privilege separation after the changes of the last couple of years, such as splitting sshd into multiple binaries.
I finally got around to writing it up - please take a look if you're curious.
https://github.com/openssh/openssh-portable/blob/master/README.privsep
Replies (1)
-
@Darius@mastodon.cloud 2026-07-03 03:20
@damienmiller@hachyderm.io Nice read, thanks. BTW you have a typo "attacks as much as possible the unprivileged" should be "to the" on line 12.