mirror of
https://github.com/freebsd/freebsd-src
synced 2024-10-15 04:43:53 +00:00
Revert a local change that sets the default for UsePrivilegeSeparation to
"sandbox" instead of "yes". In sandbox mode, the privsep child is unable to load additional libraries and will therefore crash when trying to take advantage of crypto offloading on CPUs that support it.
This commit is contained in:
parent
3c10f4198d
commit
c89ea4d72b
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=251088
|
@ -298,7 +298,7 @@ fill_default_server_options(ServerOptions *options)
|
|||
options->version_addendum = xstrdup(SSH_VERSION_FREEBSD);
|
||||
/* Turn privilege separation on by default */
|
||||
if (use_privsep == -1)
|
||||
use_privsep = PRIVSEP_ON;
|
||||
use_privsep = PRIVSEP_NOSANDBOX;
|
||||
|
||||
#ifndef HAVE_MMAP
|
||||
if (use_privsep && options->compression == 1) {
|
||||
|
|
Loading…
Reference in a new issue