disabling local-to-local transfers?
Eloi Benoist-Vanderbeken
eloi.benoist-vanderbeken at synacktiv.com
Tue Jul 28 00:48:39 AEST 2026
> Theo de Raadt <deraadt at openbsd.org> wrote:
> Eloi Benoist-Vanderbeken <eloi.benoist-vanderbeken at synacktiv.com> wrote:
>
> > Hi,
> >
> > My two cents: there is probably several scripts using scp for both remote and local copies. I'm sure I've already did that to be able to deploy things both locally and remotely depending on an argument, it saves an if.
> >
> > Breaking them doesn't sound like a good idea. If disabling local-to-local transfers becomes an option, it should be "opt-in".
>
> The local-to-local feature is already opt-in.
It seems that my message could be misinterpreted.
The NEW option (disabling the local copy) should be opt-in. It should be "--refuse-local-copy" and not "--allow-local-copy". To make sure it does not break past scripts.
More information about the openssh-unix-dev
mailing list