Skip to content

Commit 63bf34c

Browse files
privilege separation deprecated
Signed-off-by: Michée Lengronne <[email protected]>
1 parent c5f887f commit 63bf34c

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

controls/sshd_spec.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -207,9 +207,9 @@
207207
control 'sshd-16' do
208208
impact 1.0
209209
title 'Server: Use privilege separation'
210-
desc 'UsePrivilegeSeparation is an option, when enabled will allow the OpenSSH server to run a small (necessary) amount of code as root and the of the code in a chroot jail environment. This enables ssh to deal incoming network traffic in an unprivileged child process to avoid privilege escalation by an attacker.'
210+
desc 'UsePrivilegeSeparation is deprecated.'
211211
describe sshd_config(sshd_custom_path + '/sshd_config') do
212-
its('UsePrivilegeSeparation') { should eq(sshd_valid_privseparation) }
212+
its('UsePrivilegeSeparation') { should eq nil }
213213
end
214214
end
215215

0 commit comments

Comments
 (0)