From 01ed1c648a2c42e85e73cac3b7647f1cddc4abba Mon Sep 17 00:00:00 2001 From: Damien Miller Date: Fri, 3 Jul 2026 12:49:26 +1000 Subject: [PATCH] tweak previous --- README.privsep | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.privsep b/README.privsep index 8244d2521..79617d903 100644 --- a/README.privsep +++ b/README.privsep @@ -1,7 +1,7 @@ Privilege separation, or privsep, is a method in OpenSSH by which operations that require root privilege are performed by a separate privileged monitor process. Its purpose is to prevent privilege -escalation by: +escalation and mitigate attacks by: - reducing the privileged attack surface by performing most operations with untrusted data in unprivileged code, @@ -82,7 +82,7 @@ PerSourcePenalties controls. | | sshd-session (postauth monitor) | | | +---------------++------------------+ | | || | -| || fork+exec | +| || fork | | || | | network socket +--------------++---------------+ | | \-----------+ sshd-session (unprivileged) | |