disabling local-to-local transfers?

[Theo de Raadt]

Eloi Benoist-Vanderbeken <eloi.benoist-vanderbeken at synacktiv.com> wrote:

> Hi,
> 
> My two cents: there is probably several scripts using scp for both remote and local copies. I'm sure I've already did that to be able to deploy things both locally and remotely depending on an argument, it saves an if.
> 
> Breaking them doesn't sound like a good idea. If disabling local-to-local transfers becomes an option, it should be "opt-in".

The local-to-local feature is already opt-in.

To do a local-to-local copy, you must flag the request by not using ':'

If you use 'host:' on either the source or target, the local-to-local code
is not reached.