Re: [suse-security] New OpenSSH - strange processlist

Sven 'Darkman' Michels wrote:

Hi all,

i noticed that 2 sshd's are running per login?! Szenario: no one logged in: 1 sshd (main) running.

1 user logged in: 1 sshd (main), 1 sshd (owner root), 1 sshd (owner user) running.

2 users logged in: 1 sshd (main), 2 sshd (owner root), 2 sshd (owner user) running.

anybody knows why? afaik it wasn't so befor the update...

Well, privilege separation is working for you then :) Take a look at <http://www.citi.umich.edu/u/provos/ssh/privsep.html> which should explain why this *must* happen, when you turn on privsep in OpenSSH. Ralph