HomeFreeBSD

openssh: blocklist: Use NetBSD probes

Description

openssh: blocklist: Use NetBSD probes

Use NetBSD probe locations for consistency. We have submitted all
improved or missing probes, keeping them synchronized with NetBSD (our
blocklist upstream) should simplify upgrades and maintenance, as the
locations of these probes are a moving target, depending on upstream
OpenSSH changes.

Additionally, use BLACKLIST_AUTH_FAIL exclusively for now. At the time
of this commit BLACKLIST_BAD_USER, is a no-op. However, it will change
in a future upgrade.

Also, enhance blacklist notification messages for better debugging by
making them more descriptive.

Reviewed by: emaste
Approved by: emaste (mentor)
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D52749

(cherry picked from commit e02003bce726333872d65b7b9a1557d97b6d91a0)
(cherry picked from commit 53dc967db74fba0d7b5bed413a7bc3216f16c55d)
(cherry picked from commit 9c82c17c2a3ac61a69cb5337cb6f92ae88bc0b08)
(cherry picked from commit 7161c525abffe6cdb19ac01223d058fcbabf49c5)

Details

Provenance
jlduranAuthored on Sep 29 2025, 4:32 PM
emasteCommitted on Jan 20 2026, 7:42 PM
Reviewer
emaste
Differential Revision
D52749: openssh: blocklist: Use NetBSD probes
Parents
rG79041942fa9a: openssh: Don't include an unused EVP_CIPHER_CTX_get_iv() stub
Branches
Unknown
Tags
Unknown