[openssh-commits] [openssh] branch master updated (ae44cd74f -> 5e9ca80fe)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

    from ae44cd74f upstream: cast
     new 9184fa363 check for setsockopt IP_TOS in OpenBSD pledge
     new 6c84609e5 depend
     new 5e9ca80fe Match version instead of groups in connect-bigconf

The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit 5e9ca80fe65e407428dc46ed45804724d08b91b7
Author: Damien Miller <djm at mindrot.org>
Date:   Mon Aug 18 16:47:23 2025 +1000

    Match version instead of groups in connect-bigconf
    
    The connect-bigconf makes a giant config file to test config passing
    between the sshd subprocesses. Previously it used a bunch of "Match
    group" lines to construct a large file. However checking group
    membership can be expensive (e.g. if a large groups database is
    present or if group lookup is remote via NSS). This could be slow
    enough to exceed LoginGraceTime.
    
    This switches it to "Match version" which is just a string compare
    and does just as well for making a giant nonsense config file.

commit 6c84609e5f9ddd49e250d5cf190b2820dbeca178
Author: Damien Miller <djm at mindrot.org>
Date:   Mon Aug 18 16:47:00 2025 +1000

    depend

commit 9184fa363687fcb5dac056b093fb3b8e9d327242
Author: Damien Miller <djm at mindrot.org>
Date:   Mon Aug 18 16:45:15 2025 +1000

    check for setsockopt IP_TOS in OpenBSD pledge
    
    OpenBSD has recently relaxed the pledge(2) sandbox to allow some
    setsockopt options to be changed without the "inet" promise.
    
    This adds compatibility for OpenBSD that predates this relaxation.

Summary of changes:
 .depend                    | 17 -----------------
 clientloop.c               |  4 ++--
 configure.ac               | 29 +++++++++++++++++++++++++++++
 regress/connect-bigconf.sh |  2 +-
 4 files changed, 32 insertions(+), 20 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.