Skip to content
This repository has been archived by the owner on Feb 29, 2024. It is now read-only.

Commit

Permalink
Remove deprecated UsePrivilegeSeparation option
Browse files Browse the repository at this point in the history
From https://www.openssh.com/releasenotes.html:

 * This release deprecates the sshd_config UsePrivilegeSeparation
   option, thereby making privilege separation mandatory. Privilege
   separation has been on by default for almost 15 years and
   sandboxing has been on by default for almost the last five.

Since master only targets CentOS 8 and onwards which has
openssh-8.0p1-4.el8 or later, we can safely remove this and get rid of
the following warning:
May 18 10:50:02 underCloud.localDomain sshd[131346]: rexec line 21: Deprecated option UsePrivilegeSeparation

Change-Id: Idff6074d8f01d6a5a784c42521f0cf9d7c6dfbf1
  • Loading branch information
mbaldessari committed May 18, 2020
1 parent 0b99234 commit d6b2cfc
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion deployment/sshd/sshd-baremetal-puppet.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,6 @@ parameters:
UsePAM: 'yes'
UseDNS: 'no'
X11Forwarding: 'yes'
UsePrivilegeSeparation: 'sandbox'
AcceptEnv:
- 'LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES'
- 'LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT'
Expand Down

0 comments on commit d6b2cfc

Please sign in to comment.