[Bug 3782] Existing configs broken by baec3f7f4c60cd5aa1bb9adbeb6dfa4a172502a8

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Fri Jan 31 08:30:39 AEDT 2025


https://bugzilla.mindrot.org/show_bug.cgi?id=3782

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |djm at mindrot.org
         Resolution|---                         |WONTFIX

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Yes, unfortunately this incompatibility is an unavoidable price of
better quoting semantics.

The incompatibility and the same workaround you arrived at were
mentioned in the openssh-9.9 release notes:

> * ssh(1), sshd(8): processing of the arguments to the "Match"
>   configuration directive now follows more shell-like rules for
>   quoted strings, including allowing nested quotes and \-escaped
>   characters. If configurations contained workarounds for the
>   previous simplistic quote handling then they may need to be
>   adjusted. If this is the case, it's most likely to be in the
>   arguments to a "Match exec" confition. In this case, moving the
>   command to be evaluated from the Match line to an external shell
>   script is easiest way to preserve compatibility with both the old
>   and new versions.

We don't plan to make further changes to Match argument handling.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list