3 ms·

But the OpenSSH they have in OpenBSD is maintained in-tree I think. And then they have the portable OpenSSH that they maintain separately for other systems to u

But the OpenSSH they have in OpenBSD is maintained in-tree I think. And then they have the portable OpenSSH that they maintain separately for other systems to use. And then changes in either are probably integrated into the other keeping them largely the same. But there surely are some features in either that are intentionally kept out of the other?

NekkoDroid 2y ago
One of these is probably the recently upstream added sd_notify support, as the BSDs currently (or probably ever) dont support systemd. But the notification mechanism isn't really systemd specific, so maybe they can make use of it somehow for something, dunno.
- throw0101c 2y ago
  https://github.com/openssh/openssh-portable/commit/08f579231cd38a1c657aaa6ddeb8ab57a1fd4f5c https://github.com/openssh/openssh-portable/commit/08f579231... ?
  - NekkoDroid 2y ago
    Yes, that is what I am talking about. This has no use for it in the in-tree openssh of BSD, so it wouldn't surprise me if this specific patch is omitted from the in-tree variant.
throw0101c 2y ago
> This is a port of OpenBSD's OpenSSH to most Unix-like operating systems, including Linux, OS X and Cygwin. Portable OpenSSH polyfills OpenBSD APIs that are not available elsewhere, adds sshd sandboxing for more operating systems and includes support for OS-native authentication and auditing (e.g. using PAM). * https://github.com/openssh/openssh-portable https://github.com/openssh/openssh-portable Perhaps see specifically the "openbsd-compat" directory, otherwise I think the source tree is very close the the 'OpenBSD version': * https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/ https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/