Page MenuHomeFreeBSD
Differential D52880

security/openssh-portable: Sync blocklist patch
ClosedPublic
Actions

Authored by jlduran on Oct 3 2025, 3:35 AM.
Tags
None
Referenced Files
F165027641: D52880.id163408.diff
Wed, Aug 5, 9:25 AM
F165026794: D52880.id164018.diff
Wed, Aug 5, 9:20 AM
F165013943: D52880.id164021.diff
Wed, Aug 5, 8:16 AM
Unknown Object (File)
Tue, Aug 4, 8:56 PM
Unknown Object (File)
Tue, Aug 4, 3:02 PM
Unknown Object (File)
Tue, Aug 4, 4:36 AM
Unknown Object (File)
Mon, Aug 3, 11:20 PM
Unknown Object (File)
Mon, Aug 3, 5:52 PM
View All 95 Files
Subscribers
None

Details

Reviewers
bdrewery
emaste
Commits
R11:08772b31e171: security/openssh-portable: Sync blocklist with base
R11:28bb20eaf642: security/openssh-portable: Sync blocklist with base, include by default.
Summary

Sync with our base implementation of blocklist.

Diff Detail

Repository
R11 FreeBSD ports repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

jlduran requested review of this revision.Oct 3 2025, 3:35 AM
jlduran created this revision.
Harbormaster completed remote builds in B67509: Diff 163408.Oct 3 2025, 3:35 AM
jlduran updated this revision to Diff 164018.Oct 11 2025, 4:02 PM

Bump PORTREVISION

Harbormaster completed remote builds in B67721: Diff 164018.Oct 11 2025, 4:02 PM
bdrewery accepted this revision.Oct 11 2025, 4:09 PM

Thank you.

security/openssh-portable/Makefile
46

We should add BLACKLISTD here given it's on by default in base. If you don't, I will after you commit this.

This revision is now accepted and ready to land.Oct 11 2025, 4:09 PM
jlduran added inline comments.Oct 11 2025, 4:14 PM
security/openssh-portable/Makefile
46

Thank you! Yes please.
If you don't mind committing this patch as well, as I'm not sure about the procedure for committing to ports.

bdrewery added inline comments.Oct 11 2025, 4:14 PM
security/openssh-portable/Makefile
46

Sure I'll do that right now!

bdrewery added inline comments.Oct 11 2025, 4:21 PM
security/openssh-portable/Makefile
46

I mean to say that I will enable the _patch_ by default. I am not modifying the useblocklist in sshd_config.

jlduran added inline comments.Oct 11 2025, 4:37 PM
security/openssh-portable/Makefile
46

Yes, that's what I understood :-)
Unfortunately configuring UseBlocklist in sshd_config usually goes hand in hand with a firewall configuration, so it wouldn't be advised.
Thank you!

Closed by commit R11:28bb20eaf642: security/openssh-portable: Sync blocklist with base, include by default. (authored by jlduran, committed by bdrewery). · Explain WhyOct 11 2025, 5:31 PM
This revision was automatically updated to reflect the committed changes.
bdrewery added a commit: R11:28bb20eaf642: security/openssh-portable: Sync blocklist with base, include by default..
bdrewery added a commit: R11:08772b31e171: security/openssh-portable: Sync blocklist with base.Oct 11 2025, 6:04 PM

Revision Contents
Changeset List

PathSize
security/
openssh-portable/
12 lines
files/
387 lines
16 lines
27 lines

Diff 164021

View Options

security/openssh-portable/Makefile

Loading...
View Options

security/openssh-portable/files/extra-patch-blacklistd

Loading...
View Options

security/openssh-portable/files/extra-patch-hpn

Loading...
View Options

security/openssh-portable/files/extra-patch-no-blocklistd-hpn-glue

Loading...