- (stevesk) [README.privsep] minor updates

2 files changed, 5 insertions, 4 deletions

diff --git a/ChangeLog b/ChangeLog
index ec6e4726..4efc11ac 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,6 @@
 20020625
  - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh
+ - (stevesk) [README.privsep] minor updates
 
 20020624
  - OpenBSD CVS Sync
@@ -1085,4 +1086,4 @@
  - (stevesk) entropy.c: typo in debug message
  - (djm) ssh-keygen -i needs seeded RNG; report from markus@
 
-$Id: ChangeLog,v 1.2265 2002/06/24 16:26:49 stevesk Exp $
+$Id: ChangeLog,v 1.2266 2002/06/24 16:49:22 stevesk Exp $
diff --git a/README.privsep b/README.privsep
index 6c798f3a..12b9cb2f 100644
--- a/README.privsep
+++ b/README.privsep
@@ -12,7 +12,7 @@ On systems which lack mmap or anonymous (MAP_ANON) memory mapping,
 compression must be disabled in order for privilege separation to 
 function.
 
-When privsep is enabled, the pre-authentication sshd process will
+When privsep is enabled, during the pre-authentication phase sshd will
 chroot(2) to "/var/empty" and change its privileges to the "sshd" user
 and its primary group.  You should do something like the following to
 prepare the privsep preauth environment:
@@ -21,7 +21,7 @@ prepare the privsep preauth environment:
 	# chown root:sys /var/empty
 	# chmod 755 /var/empty
 	# groupadd sshd
-	# useradd -g sshd sshd
+	# useradd -g sshd -c 'sshd privsep' -d /var/empty sshd
 
 If you are on UnixWare 7 or OpenUNIX 8 do this additional step.
 	# ln /usr/lib/.ns.so /usr/lib/ns.so.1
@@ -57,4 +57,4 @@ process 1005 is the sshd process listening for new connections.
 process 6917 is the privileged monitor process, 6919 is the user owned
 sshd process and 6921 is the shell process.
 
-$Id: README.privsep,v 1.7 2002/06/21 14:48:02 djm Exp $
+$Id: README.privsep,v 1.8 2002/06/24 16:49:22 stevesk Exp $