[Bug 3182] New: openssh-8.2 make ClientAliveCountMax=0 disable the connection

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Wed Jun 17 18:44:16 AEST 2020


https://bugzilla.mindrot.org/show_bug.cgi?id=3182

            Bug ID: 3182
           Summary: openssh-8.2 make ClientAliveCountMax=0 disable the
                    connection
           Product: Portable OpenSSH
           Version: 8.2p1
          Hardware: ARM64
                OS: Linux
            Status: NEW
          Severity: security
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: kircherlike at outlook.com

The meaning of the ClientAliveCountMax=0 parameter modified in OpenSSH
8.2 is as follows: 
https://anongit.mindrot.org/openssh.git/commit/?id=69334996ae203c51c70bf01d414c918a44618f8e

This modification indicates that the OpenSSH does not provide the
function of exiting the client due to timeout after no operation is
performed on the client for a long time. In most cases, a client that
does not perform any operation responds to the heartbeat packets sent
by the server. 

The TMOUT parameter in /etc/profile can implement this function. This
parameter, however, is configurable on the client. 

We hope that OpenSSH can re-provide a parameter on the server to make
the client that does not perform any operation exit due to timeout.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list