[Linux-disciples] Killing a specific sshd instance

[Adam Kessel]

On Wed, Feb 18, 2004 at 06:25:38PM -0500, Stephen R Laniel wrote:
> On Wed, Feb 18, 2004 at 05:46:45PM -0500, Adam Kessel wrote:
> > It should be running as user slaniel, so that would limit it, and pids
> > accumulate incrementally, so I would just kill lower sshd pids with uid
> > slaniel.
> 
> sshd would be running as slaniel? Really? It's running as a
> daemon, so wouldn't root be the uid?

Well, this is an easy enough thing to check.  E.g.,

joehill:~>ssh bostoncoop.net

bostoncoop:~>ps aux | grep sshd

root      3497  0.0  0.3  2884  740 ?        S    Jan07   5:58 /usr/sbin/sshd
root      4033  0.0  0.5  5912 1044 ?        S    16:08   0:00 /usr/sbin/sshd
nrbutler  4035  0.0  0.5  5916 1232 ?        S    16:08   0:00 /usr/sbin/sshd
root     10300  1.8  0.7  5924 1600 ?        S    20:23   0:00 /usr/sbin/sshd
adam     10302  0.5  0.8  5924 1708 ?        S    20:23   0:00 /usr/sbin/sshd

As you see, each sshd session is running as the user it is logged in as.
It makes good sense.  The root sshd's are the ones that are listening for
new connections.
-- 
Adam Kessel
http://adam.rosi-kessel.org