https://bugzilla.mindrot.org/show_bug.cgi?id=1090
--- Comment #13 from Damien Miller <djm@mindrot.org> 2008-05-08 22:37:54 ---
a modified version of this patch has been committed, and will be in
OpenSSH-5.1
> CVSROOT: /cvs
> Module name: src
> Changes by: djm@cvs.openbsd.org 2008/05/08 06:21:16
>
> Modified files:
> usr.bin/ssh : Makefile.inc monitor.c monitor_wrap.c
> servconf.c servconf.h session.c session.h
> sshd_config sshd_config.5
>
> Log message:
> Make the maximum number of sessions run-time controllable via
> a sshd_config MaxSessions knob. This is useful for disabling
> login/shell/subsystem access while leaving port-forwarding working
> (MaxSessions 0), disabling connection multiplexing (MaxSessions 1) or
> simply increasing the number of allows multiplexed sessions.
>
> Because some bozos are sure to configure MaxSessions in excess of the
> number of available file descriptors in sshd (which, at peak, might be
> as many as 9*MaxSessions), audit sshd to ensure that it doesn't leak fds
> on error paths, and make it fail gracefully on out-of-fd conditions -
> sending channel errors instead of than exiting with fatal().
>
> bz#1090; MaxSessions config bits and manpage from junyer AT gmail.com
>
> ok markus@
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
--- Comment #13 from Damien Miller <djm@mindrot.org> 2008-05-08 22:37:54 ---
a modified version of this patch has been committed, and will be in
OpenSSH-5.1
> CVSROOT: /cvs
> Module name: src
> Changes by: djm@cvs.openbsd.org 2008/05/08 06:21:16
>
> Modified files:
> usr.bin/ssh : Makefile.inc monitor.c monitor_wrap.c
> servconf.c servconf.h session.c session.h
> sshd_config sshd_config.5
>
> Log message:
> Make the maximum number of sessions run-time controllable via
> a sshd_config MaxSessions knob. This is useful for disabling
> login/shell/subsystem access while leaving port-forwarding working
> (MaxSessions 0), disabling connection multiplexing (MaxSessions 1) or
> simply increasing the number of allows multiplexed sessions.
>
> Because some bozos are sure to configure MaxSessions in excess of the
> number of available file descriptors in sshd (which, at peak, might be
> as many as 9*MaxSessions), audit sshd to ensure that it doesn't leak fds
> on error paths, and make it fail gracefully on out-of-fd conditions -
> sending channel errors instead of than exiting with fatal().
>
> bz#1090; MaxSessions config bits and manpage from junyer AT gmail.com
>
> ok markus@
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs