10 ms·
Yes it is quite comforting this is post-authentication, so in most cases no big deal. Just tough luck for shared accounts. I guess most people dont run sshd as
by antocv 13y ago
Yes it is quite comforting this is post-authentication, so in most cases no big deal. Just tough luck for shared accounts.
I guess most people dont run sshd as root and capabilities either so that minimizes damage too. Another reason to not run ssh on port 22, no root, no special caps needed.
- Nick_C 13y agoAll my servers run sshd as root, including the FreeBSD ones. Is that ok? Or do you mean that sshd drops privileges for the child after forking?