openssh: privilege separation no longer supported on Cygwin? -- example only

[Houder]

On 2017-05-29 11:48, Houder wrote:

  - pre-authentication:

Shell 1:
64-@@ ssh -p 222 -l Henri 192.168.178.15
Enter passphrase for key '/home/Henri/.ssh/id_rsa': <==== passphrase not 
yet entered

Shell 2: (observer)
64-@@# ps -af
      UID     PID    PPID  TTY        STIME COMMAND
    Henri    2308    4356 pty0     11:01:41 /usr/bin/ssh
    Henri    5092     176 pty1     11:01:58 /usr/bin/ps
    Henri    4356    3744 pty0     10:57:56 /usr/bin/bash
    Henri    3744       1 ?        10:57:50 /usr/bin/mintty-273
    Henri     176    4604 pty1     10:58:21 /usr/bin/bash
cyg_serv    4992    2476 ?        11:01:03 /usr/sbin/sshd               
privileged listener
cyg_serv    2476       1 ?        11:01:03 /usr/bin/cygrunsrv
    Henri    4604       1 ?        10:58:21 /usr/bin/mintty-273
cyg_serv    1496    3032 ?        11:01:42 /usr/sbin/sshd               
should be using sshd as userid
cyg_serv    3032    4992 ?        11:01:42 /usr/sbin/sshd               
privileged monitor (child of listener)

  - post-authentication:

Shell 1:
64-@@ ssh -p 222 -l Henri 192.168.178.15
Enter passphrase for key '/home/Henri/.ssh/id_rsa': <==== passphrase has 
been entered
Last login: Mon May 29 10:07:00 2017 from 192.168.178.15
64-@@#  <===== ///// PROBLEM: this shell is ELEVATED /////

Shell 2: (observer)
64-@@# ps -af
      UID     PID    PPID  TTY        STIME COMMAND
    Henri    2496    3032 pty3     11:02:31 /usr/bin/bash               
remote shell (but it is an elevated shell! ?????)
    Henri    2308    4356 pty0     11:01:41 /usr/bin/ssh
    Henri    4356    3744 pty0     10:57:56 /usr/bin/bash
    Henri    3744       1 ?        10:57:50 /usr/bin/mintty-273
    Henri     176    4604 pty1     10:58:21 /usr/bin/bash
cyg_serv    4992    2476 ?        11:01:03 /usr/sbin/sshd              
privileged listener
    Henri    4996     176 pty1     11:06:05 /usr/bin/ps
cyg_serv    2476       1 ?        11:01:03 /usr/bin/cygrunsrv
    Henri    4604       1 ?        10:58:21 /usr/bin/mintty-273
cyg_serv    3032    4992 ?        11:01:42 /usr/sbin/sshd              
privileged monitor (child of listener)

======

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple