3 ms·

Interesting; will this change propagate to Linux? I don't know how intertwined OpenBSD and Linux' OpenSSHes are.

throw0101c 2y ago
> I don't know how intertwined OpenBSD and Linux' OpenSSHes are There is only one OpenSSH, and it is developed by the OpenBSD folks and used by everyone else.
- codetrotter 2y ago
  But the OpenSSH they have in OpenBSD is maintained in-tree I think. And then they have the portable OpenSSH that they maintain separately for other systems to use. And then changes in either are probably integrated into the other keeping them largely the same. But there surely are some features in either that are intentionally kept out of the other?
  - NekkoDroid 2y ago
    One of these is probably the recently upstream added sd_notify support, as the BSDs currently (or probably ever) dont support systemd. But the notification mechanism isn't really systemd specific, so maybe they can make use of it somehow for something, dunno.
    - throw0101c 2y ago
      https://github.com/openssh/openssh-portable/commit/08f579231cd38a1c657aaa6ddeb8ab57a1fd4f5c https://github.com/openssh/openssh-portable/commit/08f579231... ?
      - NekkoDroid 2y ago
        Yes, that is what I am talking about. This has no use for it in the in-tree openssh of BSD, so it wouldn't surprise me if this specific patch is omitted from the in-tree variant.
  - throw0101c 2y ago
    > This is a port of OpenBSD's OpenSSH to most Unix-like operating systems, including Linux, OS X and Cygwin. Portable OpenSSH polyfills OpenBSD APIs that are not available elsewhere, adds sshd sandboxing for more operating systems and includes support for OS-native authentication and auditing (e.g. using PAM). * https://github.com/openssh/openssh-portable https://github.com/openssh/openssh-portable Perhaps see specifically the "openbsd-compat" directory, otherwise I think the source tree is very close the the 'OpenBSD version': * https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/ https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/
djmdjm 2y ago
Yes: https://github.com/openssh/openssh-portable/commit/03e3de416ed7c34faeb692967737be4a7bbe2eb5 https://github.com/openssh/openssh-portable/commit/03e3de416...

> I don't know how intertwined OpenBSD and Linux' OpenSSHes are There is only one OpenSSH, and it is developed by the OpenBSD folks and used by everyone else.

codetrotter 2y ago
But the OpenSSH they have in OpenBSD is maintained in-tree I think. And then they have the portable OpenSSH that they maintain separately for other systems to use. And then changes in either are probably integrated into the other keeping them largely the same. But there surely are some features in either that are intentionally kept out of the other?
- NekkoDroid 2y ago
  One of these is probably the recently upstream added sd_notify support, as the BSDs currently (or probably ever) dont support systemd. But the notification mechanism isn't really systemd specific, so maybe they can make use of it somehow for something, dunno.
  - throw0101c 2y ago
    https://github.com/openssh/openssh-portable/commit/08f579231cd38a1c657aaa6ddeb8ab57a1fd4f5c https://github.com/openssh/openssh-portable/commit/08f579231... ?
    - NekkoDroid 2y ago
      Yes, that is what I am talking about. This has no use for it in the in-tree openssh of BSD, so it wouldn't surprise me if this specific patch is omitted from the in-tree variant.
- throw0101c 2y ago
  > This is a port of OpenBSD's OpenSSH to most Unix-like operating systems, including Linux, OS X and Cygwin. Portable OpenSSH polyfills OpenBSD APIs that are not available elsewhere, adds sshd sandboxing for more operating systems and includes support for OS-native authentication and auditing (e.g. using PAM). * https://github.com/openssh/openssh-portable https://github.com/openssh/openssh-portable Perhaps see specifically the "openbsd-compat" directory, otherwise I think the source tree is very close the the 'OpenBSD version': * https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/ https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/

djmdjm 2y ago

Yes: https://github.com/openssh/openssh-portable/commit/03e3de416ed7c34faeb692967737be4a7bbe2eb5 https://github.com/openssh/openssh-portable/commit/03e3de416...