From nobody Tue Jul 15 05:12:59 2025 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bh6lJ2hm4z61x8h; Tue, 15 Jul 2025 05:13:00 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bh6lH6WyDz3mHl; Tue, 15 Jul 2025 05:12:59 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1752556379; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=hhUD6rZ7yw1YbkolCG36vY+TsX87iaAaMfRayAPUSa4=; b=KOPEnXPl1Lzkej4ziedUp9VVj2KTS2B1tjSXG7lN2mAxf/7crCMtu19/lztxCF7nWbOau9 Opd237nYhhKAuqOZ+B5EQS2FYjobqCRS0Ahi2RR0UPiGMb5H+5G/BQROYmOnjoYNpLYG2O e1QSeC9XTxIE7Q5AUfMkzuN6XVa9y1q02Cdqe78IMxDHBwSadpbtx7kuI2khatFR4go3Pk aNREcEbJW7XUmH1MTCMlvtl5VWovNZfoTvaIQBET+3CrrZwZtrWSazbBPJIC4362fGHRr5 QI1jjxZdHxt0JD+3sElKv01JiBjW8f9yJjm8wjP/d7E4MncpT0JnEb+h74+5Fg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1752556379; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=hhUD6rZ7yw1YbkolCG36vY+TsX87iaAaMfRayAPUSa4=; b=RrYH3Qd0uNB9CZ4lZOvLKzUhFrh2YQvZsYhF57+v994V3zGcM9/KUN4styMDiAZ0nLV8SL 1dnrGopqIHBUj1dHlJvWRO2+4j1Xba2YN3wkjS4qXew3ELu4te2kPa+Re/e+OhviVqBZoB Rk5FXjzUXiJ7q0+PAAxA6vw3tcXiKwN1tamtnkMS/FgDhHdKMrvp+d9VcBA94MD7HRgSMm mo6r33KSZ0jzNjp4izKknN0O1A6o0VURpK/7ZhVcWJOd34XYXc4HLWeLwKtg5JDJi0JMz2 PiLhmXDkbNzPoKo5xO7lU1WYL/GawX/qRWDCSL55z+5/k1q2S7hBO7D/DW67DA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1752556379; a=rsa-sha256; cv=none; b=veUPQ4IxdvAsspbDKtNHM/xjlkAlB0claIR1F0xDnZXJdhgxeQ59VPcQo5oXfNbUCvOjpW FhQ7ozVQU/ParU4d8omQVZQXYHkPmvqLPMeKozW9qTq0Dbx0/wsC+rhVQgq3V3NInmkfor U9ugOt88uaxQir4Qb5ylhgjZML/qu5icLgrR25t0qLAg0koTvkscCgwh3YbpxS89da8KEb QexfVu5Nyy3H8+yKtcwFesOKM6A2oQ+lYowl0IXg8mZkfvcBpxcYeNCb8fvtE3J6Zu/UrX d5v6Jc7gvF1nm88Hdr7+HCDiCxXih097lqMKWRQYPAri3mB+GS5fxSmLzVdusA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bh6lH67g8z9sY; Tue, 15 Jul 2025 05:12:59 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 56F5CxMp079916; Tue, 15 Jul 2025 05:12:59 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 56F5CxRI079913; Tue, 15 Jul 2025 05:12:59 GMT (envelope-from git) Date: Tue, 15 Jul 2025 05:12:59 GMT Message-Id: <202507150512.56F5CxRI079913@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Lexi Winter Subject: git: 6738882248a7 - main - inetd.conf: remove -[46] from the ssh entry List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: ivy X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 6738882248a755aad859784150969085e006cf89 Auto-Submitted: auto-generated The branch main has been updated by ivy: URL: https://cgit.FreeBSD.org/src/commit/?id=6738882248a755aad859784150969085e006cf89 commit 6738882248a755aad859784150969085e006cf89 Author: Lexi Winter AuthorDate: 2025-07-15 04:44:38 +0000 Commit: Lexi Winter CommitDate: 2025-07-15 05:12:45 +0000 inetd.conf: remove -[46] from the ssh entry sshd doesn't require these flags, and including them makes outgoing connections (e.g., port forwarding) restricted to the family of the inbound connection, which is not usually desirable and also not how standalone sshd works. MFC after: 3 days Reviewed by: kevans Approved by: kevans (mentor) Differential Revision: https://reviews.freebsd.org/D51296 --- usr.sbin/inetd/inetd.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/usr.sbin/inetd/inetd.conf b/usr.sbin/inetd/inetd.conf index 40f1e1285af6..a8359ea793f5 100644 --- a/usr.sbin/inetd/inetd.conf +++ b/usr.sbin/inetd/inetd.conf @@ -7,8 +7,8 @@ # #ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l #ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -l -#ssh stream tcp nowait root /usr/sbin/sshd sshd -i -4 -#ssh stream tcp6 nowait root /usr/sbin/sshd sshd -i -6 +#ssh stream tcp nowait root /usr/sbin/sshd sshd -i +#ssh stream tcp6 nowait root /usr/sbin/sshd sshd -i #telnet stream tcp nowait root /usr/local/libexec/telnetd telnetd #telnet stream tcp6 nowait root /usr/local/libexec/telnetd telnetd #shell stream tcp nowait root /usr/local/sbin/rshd rshd