disabling local-to-local transfers?

[Theo de Raadt]

Eloi Benoist-Vanderbeken <eloi.benoist-vanderbeken at synacktiv.com> wrote:

> > Theo de Raadt <deraadt at openbsd.org> wrote:
> > Eloi Benoist-Vanderbeken <eloi.benoist-vanderbeken at synacktiv.com> wrote:
> > 
> > > Hi,
> > > 
> > > My two cents: there is probably several scripts using scp for both remote and local copies. I'm sure I've already did that to be able to deploy things both locally and remotely depending on an argument, it saves an if.
> > > 
> > > Breaking them doesn't sound like a good idea. If disabling local-to-local transfers becomes an option, it should be "opt-in".
> > 
> > The local-to-local feature is already opt-in.
> 
> It seems that my message could be misinterpreted.
> 
> The NEW option (disabling the local copy) should be opt-in. It should be "--refuse-local-copy" and not "--allow-local-copy". To make sure it does not break past scripts.

There is no need for a new option.

The opt-in for to permit local-to-local copy is indicated by
the absence of : in source or target.

The scripts using scp will already be doing that.