version 1.242, 2017/02/03 23:01:19 |
version 1.243, 2017/03/14 07:19:07 |
|
|
.Cm Match |
.Cm Match |
.Cm Host |
.Cm Host |
directives. |
directives. |
.It Cm UsePrivilegeSeparation |
|
Specifies whether |
|
.Xr sshd 8 |
|
separates privileges by creating an unprivileged child process |
|
to deal with incoming network traffic. |
|
After successful authentication, another process will be created that has |
|
the privilege of the authenticated user. |
|
The goal of privilege separation is to prevent privilege |
|
escalation by containing any corruption within the unprivileged processes. |
|
The argument must be |
|
.Cm yes , |
|
.Cm no , |
|
or |
|
.Cm sandbox . |
|
If |
|
.Cm UsePrivilegeSeparation |
|
is set to |
|
.Cm sandbox |
|
then the pre-authentication unprivileged process is subject to additional |
|
restrictions. |
|
The default is |
|
.Cm sandbox . |
|
.It Cm VersionAddendum |
.It Cm VersionAddendum |
Optionally specifies additional text to append to the SSH protocol banner |
Optionally specifies additional text to append to the SSH protocol banner |
sent by the server upon connection. |
sent by the server upon connection. |