git) Date: Tue, 15 Jul 2025 05:12:59 GMT Message-Id: <202507150512.56F5CxRI079913@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Lexi Winter Subject: git: 6738882248a7 - main - inetd.conf: remove -[46] from the ssh entry List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: ivy X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 6738882248a755aad859784150969085e006cf89 Auto-Submitted: auto-generated The branch main has been updated by ivy: URL: https://cgit.FreeBSD.org/src/commit/?id=6738882248a755aad859784150969085e006cf89 commit 6738882248a755aad859784150969085e006cf89 Author: Lexi Winter AuthorDate: 2025-07-15 04:44:38 +0000 Commit: Lexi Winter CommitDate: 2025-07-15 05:12:45 +0000 inetd.conf: remove -[46] from the ssh entry sshd doesn't require these flags, and including them makes outgoing connections (e.g., port forwarding) restricted to the family of the inbound connection, which is not usually desirable and also not how standalone sshd works. MFC after: 3 days Reviewed by: kevans Approved by: kevans (mentor) Differential Revision: https://reviews.freebsd.org/D51296 --- usr.sbin/inetd/inetd.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/usr.sbin/inetd/inetd.conf b/usr.sbin/inetd/inetd.conf index 40f1e1285af6..a8359ea793f5 100644 --- a/usr.sbin/inetd/inetd.conf +++ b/usr.sbin/inetd/inetd.conf @@ -7,8 +7,8 @@ # #ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l #ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -l -#ssh stream tcp nowait root /usr/sbin/sshd sshd -i -4 -#ssh stream tcp6 nowait root /usr/sbin/sshd sshd -i -6 +#ssh stream tcp nowait root /usr/sbin/sshd sshd -i +#ssh stream tcp6 nowait root /usr/sbin/sshd sshd -i #telnet stream tcp nowait root /usr/local/libexec/telnetd telnetd #telnet stream tcp6 nowait root /usr/local/libexec/telnetd telnetd #shell stream tcp nowait root /usr/local/sbin/rshd rshd