[bug-notifications] [openssh 0004417]: SSHD User's Home Directory

[Mantis Bug Tracker]

The following issue requires your FEEDBACK. 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=4417 
====================================================================== 
Reported By:                ckmehta1
Assigned To:                yann
====================================================================== 
Project:                    openssh
Issue ID:                   4417
Category:                   packaging
Reproducibility:            always
Severity:                   tweak
Priority:                   low
Status:                     feedback
====================================================================== 
Date Submitted:             2010-05-14 20:25 CEST
Last Modified:              2010-08-31 15:50 CEST
====================================================================== 
Summary:                    SSHD User's Home Directory
Description: 
I was reviewing what components are in the package and I saw this directory
in the package map file:
/var/empty

After some research for /var/empty and OpenSSH, I see its typically used
as the home directory for the sshd user created in "preinstall" script. 
However the home directory for the sshd user in that script is "/var/run". 


I am thinking it might be advisable to make the home-directory for that
user the /var/empty directory.



====================================================================== 

---------------------------------------------------------------------- 
 (0008226) yann (manager) - 2010-08-31 15:50
 https://www.opencsw.org/mantis/view.php?id=4417#c8226 
---------------------------------------------------------------------- 

As you can read in README.privsep, the PRIVSEP directory is not set by
changing the sshd home directory but by using the --with-privsep-path
configure option.

So the sshd home directory is not really important. Do you see a case
where it would not safe to have /var/run  as the home directory ?