Damien Miller | faf4d80 | 2011-08-17 12:09:19 +1000 | [diff] [blame^] | 1 | # $OpenBSD: connect-privsep.sh,v 1.2 2011/06/30 22:44:43 markus Exp $ |
Damien Miller | 38cd435 | 2002-05-01 13:17:33 +1000 | [diff] [blame] | 2 | # Placed in the Public Domain. |
| 3 | |
| 4 | tid="proxy connect with privsep" |
| 5 | |
Damien Miller | faf4d80 | 2011-08-17 12:09:19 +1000 | [diff] [blame^] | 6 | cp $OBJ/sshd_proxy $OBJ/sshd_proxy.orig |
Damien Miller | 38cd435 | 2002-05-01 13:17:33 +1000 | [diff] [blame] | 7 | echo 'UsePrivilegeSeparation yes' >> $OBJ/sshd_proxy |
| 8 | |
| 9 | for p in 1 2; do |
| 10 | ${SSH} -$p -F $OBJ/ssh_proxy 999.999.999.999 true |
| 11 | if [ $? -ne 0 ]; then |
| 12 | fail "ssh privsep+proxyconnect protocol $p failed" |
| 13 | fi |
| 14 | done |
Damien Miller | faf4d80 | 2011-08-17 12:09:19 +1000 | [diff] [blame^] | 15 | |
| 16 | cp $OBJ/sshd_proxy.orig $OBJ/sshd_proxy |
| 17 | echo 'UsePrivilegeSeparation sandbox' >> $OBJ/sshd_proxy |
| 18 | |
| 19 | for p in 1 2; do |
| 20 | ${SSH} -$p -F $OBJ/ssh_proxy 999.999.999.999 true |
| 21 | if [ $? -ne 0 ]; then |
| 22 | fail "ssh privsep/sandbox+proxyconnect protocol $p failed" |
| 23 | fi |
| 24 | done |