disabling local-to-local transfers?

Samuel Thibault samuel.thibault at ens-lyon.org
Sat Jul 25 06:48:28 AEST 2026


Theo de Raadt, le ven. 24 juil. 2026 14:15:44 -0600, a ecrit:
> Samuel Thibault <samuel.thibault at ens-lyon.org> wrote:
> > I have never asked for changing the default. I just asked for being able
> > to configure it.
> 
> You asked for scp's to exist which will fail when they are
> executed by someone else's script.

No, I asked for:

"an option which we can put in one's default config or shell aliases"

I never asked for changing someone else's scp behavior.

> > > Additionally, this is clearly documented:
> > 
> > Making it documented does not make the problem disappear.
> 
> Disagree strongly.

Well, we can only agree to disagree: I have known this behavior for
decades, and yet it poses problem. So the documentation doesn't help
with the problem. QED.

> The time to disagree with the way this works is about 34 years ago.

I didn't have Internet 34 years go.

> It works that way.  We should not introduce variations of this binary
> which behave differently.

Again, I never asked for changing the default behavior, just for
being able to configure it.

> You are out of line.  Highly compatible behaviour is a highly desireable
> behaviour, and once that behaviour (even *potentially*) enters scripts
> it cannot be changed without potentially creating a grave problem.

Again, I never asked for changing the default behavior, just for
being able to configure it.

Jeez...
Samuel


More information about the openssh-unix-dev mailing list