[Bug 3123] New: PermitOpen does not allow wildcards for hosts despite what docs say

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Wed Feb 19 12:16:04 AEDT 2020


https://bugzilla.mindrot.org/show_bug.cgi?id=3123

            Bug ID: 3123
           Summary: PermitOpen does not allow wildcards for hosts despite
                    what docs say
           Product: Portable OpenSSH
           Version: 7.2p2
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: phil at ipom.com

The man page for sshd_config, under `PermitOpen` says:

> The wildcard ‘*’ can be used for host or port to allow all hosts or 
> ports, respectively.

But this does not seem to be the case. If you do `PermitOpen *:22`, for
example, it denies everything. Using * on the port side works
correctly.

A quick look over the original patch from
https://bugzilla.mindrot.org/show_bug.cgi?id=1857 seems to only add the
wild-card checking code to the port-check path, if I'm reading it
correctly.

Ideally, wildcards on the host side would work, but alternatively, the
docs should be updated.

Thanks!

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list