Is there any risk in running ssh daemon with no root privilege using this method: how-can-i-make-this-daemon-init-run-as-a-non-root-user?
Debian Developer's Best Practices for OS Security says the same thing:
• Starts the daemon dropping privileges: if the software does not do the setuid(2) or seteuid(2) call itself, you can use the --chuid call of start-stop-daemon.
It's easy and gave a good layer of protection, but I can't find any info about applying this method to sshd, and it seems that nobody do this!, why? is there any risk to use this with ssh daemons? does sshd need root for something? I tested in my environment and I had no problem at all! why nobody talk in there guides about this gem?
I already know that I can t bind with ports less than 1024 without root, and I don't need to, I m the only admin of this VPS so the only one who will run the sshd. What's the worst that could happen?