From faf3c8382dba2d20b30d6f49b9ecaf30c4be12da Mon Sep 17 00:00:00 2001 From: David Mehren <git@herrmehren.de> Date: Sun, 23 Apr 2023 19:17:01 +0200 Subject: [PATCH] Remove deprecated option UsePrivilegeSeparation See https://github.com/mozilla/infosec.mozilla.org/commit/19e631ce404429e0583a98e182331cb0784f5aec --- templates/sshd_config.conf.j2 | 4 ---- 1 file changed, 4 deletions(-) diff --git a/templates/sshd_config.conf.j2 b/templates/sshd_config.conf.j2 index a0fbc7e..f5d4457 100644 --- a/templates/sshd_config.conf.j2 +++ b/templates/sshd_config.conf.j2 @@ -45,7 +45,3 @@ LogLevel VERBOSE # Log sftp level file access (read/write/etc.) that would not be easily logged otherwise. Subsystem sftp /usr/lib/openssh/sftp-server -f AUTHPRIV -l INFO - -# Use kernel sandbox mechanisms where possible in unprivileged processes -# Systrace on OpenBSD, Seccomp on Linux, seatbelt on MacOSX/Darwin, rlimit elsewhere. -UsePrivilegeSeparation sandbox -- GitLab