Should Subsystem work in a Match block?

[Iain Morgan]

On Mon, Dec 13, 2010 at 13:00:55 -0600, Daniel Kahn Gillmor wrote:
> hi folks--
> 
> Can a Match block cover a Subsystem directive in sftp?
> 
>   https://bugzilla.mindrot.org/show_bug.cgi?id=1587#c1
> 
> suggests that Match can cover Subsystem, but sshd_config (at least, in
> 5.5p1) doesn't mention Subsystem within the description of Match.
> 
> What should administrators expect?
> 
> 	--dkg
> 

No, the Subsystem directive is not supported under Match blocks. You can
check this in servconf.c. Look for the definition of the keywords array.
The third field in each entry indicates whether the option is supported
in Match blocks or not. For those that are, you will normally see
SSHCFG_ALL. In the case of Subsystem, it is SSHCFG_GLOBAL which means it
is only supported in the global section.

-- 
Iain Morgan