[Ach] SSH: UsePrivilegeSeparation yes

mls at xlist.pw mls at xlist.pw
Thu Jan 2 11:29:00 CET 2014


On Thursday 02 January 2014 22:32:48 Uli wrote:
> i just read through the document "Applied Crypto Hardening" and stumbled
> across the SSH-Section. A few settings are not only related to ciphers and
> encryptions but more to towards authentication, maybe it makes sense to add
> "UsePrivilegeSeparation yes" then as well?

According to man page "UsePrivilegeSeparation yes" is the default. The 
question is if setting it to "sandbox" would make sense. 

regards,

mls



More information about the Ach mailing list