[Bug 3236] New: multiple Subsystem options in sshd_config prevent sshd from starting

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Nov 30 19:16:11 AEDT 2020


https://bugzilla.mindrot.org/show_bug.cgi?id=3236

            Bug ID: 3236
           Summary: multiple Subsystem options in sshd_config prevent sshd
                    from starting
           Product: Portable OpenSSH
           Version: 8.4p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: jjelen at redhat.com

All of the other configuration options are just ignored, if specified
repetitively, but Subystem will prevent sshd from starting. This is
unexpected and undocumented in manual page and something that might
become more common issue with the Include support.

I would like to suggest this option would behave same as all the
others, maybe downgrading the log level of the message.

The other option would be to document it in the manual page that the
same subsystem can not repeat (yet another exception from configuration
parsing rules).

Reproducer:

# echo "Subsystem sftp internal-sftp" >> /etc/ssh/sshd_config
(repeat if it was not there before)
# sshd -T
/etc/ssh/sshd_config line 131: Subsystem 'sftp' already defined.
# echo $?
255

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list