A few people have asked me recently about how OpenSSH sshd implements privilege separation after the changes of the last couple of years, such as splitting sshd into multiple binaries.
I finally got around to writing it up - please take a look if you're curious.
https://github.com/openssh/openssh-portable/blob/master/README.privsep
Damien Miller
npub1wl…u3clx
2026-07-03 02:36:14 UTC
Author Public Key
npub1wlpzw3a798rmy9rmzy35njxw099tsdzsa2s4uh65xvhjc2vt5hwsau3clxSeen on
wss://relay.ditto.pubPublished at
2026-07-03 02:36:14 UTCEvent JSON
{
"id": "b8e214d43613a6320cb64621223efd5c7c020996d6b38334d3327d2a1cb5f533",
"pubkey": "77c22747be29c7b2147b112349c8ce794ab83450eaa15e5f54332f2c298ba5dd",
"created_at": 1783046174,
"kind": 1,
"tags": [
[
"proxy",
"https://hachyderm.io/users/damienmiller/statuses/116853714071910955",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "A few people have asked me recently about how OpenSSH sshd implements privilege separation after the changes of the last couple of years, such as splitting sshd into multiple binaries.\n\nI finally got around to writing it up - please take a look if you're curious.\n\nhttps://github.com/openssh/openssh-portable/blob/master/README.privsep",
"sig": "b8357e570dcfd975201a37a3ca71e3d1d5e951ff65c8daa2666adee42c6773cd6b3dfe607334c120bddda911542ff7069a94e8b25b17b2ef518b22f9e98fba2b"
}