Page MenuHomeFreeBSD

OpenSSH 10.4p1 FreeBSD diff against upstream
ClosedPublic

Authored by emaste on Tue, Jul 7, 1:42 PM.
Tags
None
Referenced Files
F162739230: D58083.id.diff
Thu, Jul 16, 9:06 AM
F162720075: D58083.id181607.diff
Thu, Jul 16, 3:32 AM
F162720044: D58083.id181447.diff
Thu, Jul 16, 3:31 AM
Unknown Object (File)
Tue, Jul 14, 1:30 PM
Unknown Object (File)
Tue, Jul 14, 1:22 PM
Unknown Object (File)
Tue, Jul 14, 12:56 PM
Unknown Object (File)
Mon, Jul 13, 6:24 PM
Unknown Object (File)
Mon, Jul 13, 6:16 PM

Details

Summary

This is a diff against upstream after merging OpenSSH 10.4p1 -- git diff --diff-filter=M vendor/openssh/10.4p1 HEAD:crypto/openssh

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

emaste requested review of this revision.Tue, Jul 7, 1:42 PM
servconf.h
396

Will remove blank line

sshd_config.5
2070

This appears to have been lost

servconf.h
264–265
sshd_config.5
2070

I see that part was moved to servconf.h, under SSHD_CONFIG_ENTRIES_ALIASES.

servconf.c
253

And the closing } of course.
I wonder if this local change has/had a corresponding upstream attempt?

sshd-session.c
1379

This was introduced in the previous vendor import.
I may need to check if this warrants a blocklist probe as well.

servconf.c
253

Or move the test before derelativise_path? Or, should we be checking access(rpath, ...) perhaps?

servconf.c
253

I'm inclined to think that we should be checking access(apath, ...) instead of moving the test before derelativise_path().

servconf_add_hostkey fixup reported by @jlduran

This looks good to me.
I tried re-creating it yesterday, and arrived at the same result (assuming SSH_VERSION_FREEBSD will be bumped upon commit).
Let me know your diff after freebsd-configure.sh and freebsd-namespace.sh, as there were a few changes there as well.

This revision is now accepted and ready to land.Thu, Jul 9, 3:33 PM

Let me know your diff after freebsd-configure.sh and freebsd-namespace.sh, as there were a few changes there as well.

I put the diff against upstream in D58128 - please check crypto/openssh/{config.h, ssh_namespace.h, version.h} and secure/lib/libssh/Makefile there.

This revision was automatically updated to reflect the committed changes.