[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#954965: /etc/ssh/ssh_config: ssh_config: Include custom config files at the end, so they can overwrite the default settings



Title: Untitled

Package: openssh-server
Version: 1:8.2p1-4
Followup-For: Bug #954965

Just wanted to chime in to say that

  1. I can confirm that the config works as intended,

  2. The debug output is really quite confusing in this regard:

    debug3: /etc/ssh/sshd_config.d/no-xforwarding.conf:1 setting X11Forwarding no  
    […]  
    debug3: /etc/ssh/sshd_config:91 setting X11Forwarding yes  

    This clearly suggests that X11Forwarding is being turned on again.

-- System Information:
Debian Release: bullseye/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.5.0-rc5-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_NZ, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8), LANGUAGE=en_NZ:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openssh-server depends on:
ii adduser 3.118
ii debconf [debconf-2.0] 1.5.73
ii dpkg 1.19.7
ii libaudit1 1:2.8.5-3+b1
ii libc6 2.30-4
ii libcom-err2 1.45.6-1
ii libcrypt1 1:4.4.16-1
ii libgssapi-krb5-2 1.17-7
ii libkrb5-3 1.17-7
ii libpam-modules 1.3.1-5
ii libpam-runtime 1.3.1-5
ii libpam0g 1.3.1-5
ii libselinux1 3.0-1+b3
ii libssl1.1 1.1.1f-1
ii libsystemd0 245.4-4
ii libwrap0 7.6.q-30
ii lsb-base 11.1.0
ii openssh-client 1:8.2p1-4
ii openssh-sftp-server 1:8.2p1-4
ii procps 2:3.3.16-4
ii runit-helper 2.8.15
ii ucf 3.0038+nmu1
ii zlib1g 1:1.2.11.dfsg-2

Versions of packages openssh-server recommends:
ii libpam-systemd [logind] 245.4-4
pn ncurses-term <none>
ii xauth 1:1.0.10-1

Versions of packages openssh-server suggests:
pn molly-guard <none>
pn monkeysphere <none>
ii ssh-askpass 1:1.2.4.1-10+b1
pn ufw <none>

-- debconf information excluded

--
.''`. martin f. krafft @martinkrafft
: :' : proud Debian developer
`. `'` http://people.debian.org/~madduck
`- Debian - when you have better things to do than fixing systems

Attachment: digital_signature_gpg.asc
Description: Digital GPG signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)


Reply to: