[Bug 1090] Increase MAX_SESSIONS?

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu May 8 22:37:59 EST 2008


https://bugzilla.mindrot.org/show_bug.cgi?id=1090





--- Comment #13 from Damien Miller <djm at mindrot.org>  2008-05-08 22:37:54 ---
a modified version of this patch has been committed, and will be in
OpenSSH-5.1

> CVSROOT:        /cvs
> Module name:    src
> Changes by:     djm at cvs.openbsd.org     2008/05/08 06:21:16
> 
> Modified files:
>         usr.bin/ssh    : Makefile.inc monitor.c monitor_wrap.c
>                          servconf.c servconf.h session.c session.h
>                          sshd_config sshd_config.5
> 
> Log message:
> Make the maximum number of sessions run-time controllable via
> a sshd_config MaxSessions knob. This is useful for disabling
> login/shell/subsystem access while leaving port-forwarding working
> (MaxSessions 0), disabling connection multiplexing (MaxSessions 1) or
> simply increasing the number of allows multiplexed sessions.
> 
> Because some bozos are sure to configure MaxSessions in excess of the
> number of available file descriptors in sshd (which, at peak, might be
> as many as 9*MaxSessions), audit sshd to ensure that it doesn't leak fds
> on error paths, and make it fail gracefully on out-of-fd conditions -
> sending channel errors instead of than exiting with fatal().
> 
> bz#1090; MaxSessions config bits and manpage from junyer AT gmail.com
> 
> ok markus@

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list