OpenSSH_2.9.9p2 and client config

[Petri Kaukasoina]

(Sorry, I sent this to the wrong address. Now to the list...)

On Fri, Sep 28, 2001 at 05:41:55PM +0200, Markus Friedl wrote:
> that's a bug.
> 
> 2.9.9 reads system config first.

Yes, a bug with security consequeces because it breaks the policy
the user had set.

So, this is the right fix? Shouldn't there be a new distribution tar
ball ASAP?

--- ssh.c.orig	Tue Sep 25 01:04:03 2001
+++ ssh.c	Sat Sep 29 14:16:00 2001
@@ -628,8 +628,8 @@
 		    _PATH_SSH_USER_CONFFILE);
 
 		/* Read systemwide configuration file. */
-		(void)read_config_file(_PATH_HOST_CONFIG_FILE, host, &options);
 		(void)read_config_file(buf, host, &options);
+		(void)read_config_file(_PATH_HOST_CONFIG_FILE, host, &options);
 	}
 
 	/* Fill configuration defaults. */