Patch: Unix Domain Socket Forwards for 4.4p1

William Ahern william at 25thandClement.com
Wed Oct 4 06:45:43 EST 2006


I've updated the streamlocal patch for OpenSSH 4.4p1.

	http://www.25thandclement.com/~william/projects/streamlocal.html

This patch allows for local and remote forwards, to and from Unix domain
sockets. Simply specify the socket path, enclosed within squares braces
(i.e. -L[/tmp/.s.PGSQL.5432]:[/tmp/.s.PGSQL.5432]) as the origin and/or
destination of the -R and -L switches. This patch also includes additions to
the regression suite.

Because I haven't had the time to separate them out, this patch incorporates
two other features:

1) Explicit user/group restrictions on control sockets (instead of the fixed
"sameuser or root" policy).

2) Being able to specify an explicit protocol banner for sshd.




More information about the openssh-unix-dev mailing list