[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1014234: marked as done (sshd: Move Include at the end to allow overriding default values)

Your message dated Sat, 2 Jul 2022 17:51:00 +0200
with message-id <c25728aa-5be5-74bc-e532-daa35096f3c7@svario.it>
and subject line Re: sshd: Move Include at the end to allow overriding default values
has caused the Debian Bug report #1014234,
regarding sshd: Move Include at the end to allow overriding default values
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1014234: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014234
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: openssh-server
Version: 1:8.9p1-3

Dear openssh maintainers,
could you please move the `Include /etc/ssh/sshd_config.d/*.conf` line to the end of `/etc/sshd_config`?
Having that line at the beginning of the file makes it impossible to override in `.d` files the default settings set after it, for example `PasswordAuthentication` or `AcceptEnv`. 

Regards,

--
Gioele Barabucci

--- End Message ---
--- Begin Message --- 
On 02/07/22 17:23, Ansgar wrote:

On Sat, 2 Jul 2022 17:10:32 +0200 Gioele Barabucci wrote:

could you please move the `Include /etc/ssh/sshd_config.d/*.conf` line
to the end of `/etc/sshd_config`?

Having that line at the beginning of the file makes it impossible to
override in `.d` files the default settings set after it, for example
`PasswordAuthentication` or `AcceptEnv`.


man:sshd_config(8) says "For each keyword, the first obtained value
will be used."

So having the `Include` at the beginning seems correct to allow
overriding the contents of /etc/ssh/sshd_config.


Thanks for the explanation. I was assuming a more "imperative" semantics
where the last value wins. Sorry for the noise.

Kind regards,

--
Gioele Barabucci

--- End Message ---
Reply to: