Should Subsystem work in a Match block?

[Darren Tucker]

On 14/12/10 6:00 AM, Daniel Kahn Gillmor wrote:
> hi folks--
>
> Can a Match block cover a Subsystem directive in sftp?
>
>    https://bugzilla.mindrot.org/show_bug.cgi?id=1587#c1
>
> suggests that Match can cover Subsystem, but sshd_config (at least, in
> 5.5p1) doesn't mention Subsystem within the description of Match.

Right now Subsystem is only allowed in global scope ie not in a Match block.

We only implemented the things that had a plausible use case to keep the 
number of permutations down.  Is there a plausible use case for this?

> What should administrators expect?

That the documentation is accurate :-)
(and if it's not, that it's a reportable bug)

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.