Re: How to create root account to own /var/empty for ssh?

[L A Walsh <cygwin at tlinx dot org>]

Marco Atzeri wrote:
> > How am I supposed to make ssh happy?
> >
> > Thanks!
> > -l
>
> user separation ?
>
> $ ls -ld /var/empty
> drwxr-xr-x+ 1 cyg_server Administrators 0 Jan  7  2015 /var/empty

Um, could elaborate?  I mean do I just create a user called
cyg_server, and that makes it sshd happy?  Or how is user
separation different than having root own the directory?

Also, is it the same separation mentioned in this
deprecation message?:

>  /sbin/sshd
/etc/sshd_config line 105: Deprecated option UsePrivilegeSeparation
/var/empty must be owned by root and not group or world-writable.

...or has the option been renamed?  FWIW -- this *used* to work on my
machine until the upgrade.

Thanks again!



p.s. -- BTW, found this amusing: the old 'sshd' works still
works and picks up the newer openssl lib::

New sshd:
/sbin> /sbin/sshd -v
sshd: unknown option -- v
OpenSSH_7.5p1, OpenSSL 1.0.2k  26 Jan 2017
/sbin> /sbin/sshd  -4
/etc/sshd_config line 105: Deprecated option UsePrivilegeSeparation
Could not load host key: /etc/ssh_host_ed25519_key
/var/empty must be owned by root and not group or world-writable.
/sbin/

Old sshd:
/sbin.o> ./sshd --version
sshd: unknown option -- -
OpenSSH_6.6.1p1, OpenSSL 1.0.2k  26 Jan 2017
/sbin.o> /sbin.o/sshd  -4   
Could not load host key: /etc/ssh_host_ed25519_key
/sbin.o> (works)

---------
Wasn't user-separation in 6.6?




--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple