[priv] in SSH Sessions

stefaandk · 11-29-2005, 04:14 PM

On our linux systems (Fedora) whenever the data centre needs to do something to them they always list like this

adminsp pts/0 ns.datacentre.com 08:43 6:42 0.03s 0.01s sshd: adminsp [priv]

Nor do anything they do appear in the history by the looks of it, how does that work?

Thanks,

Capt_Caveman · 11-30-2005, 10:34 AM

http://www.servepath.com/support/redhat_faq.htm#adminsp

They may just unset the history. How are you checking it?

hardyoyo · 09-22-2006, 12:05 PM

Quote:

Originally Posted by stefaandk

how does that work?

Privelege seperation (privsep) is configured for your ssh server. When you see [priv], you know that they are logged in as root.

Google up privsep and ssh for more info.