Re: FreeBSD Errata Notice FreeBSD-EN-23:09.freebsd-update [REVISED]

On 20/10/2023 08:55, Ben Stuyts wrote:
> 
>> On 20 Oct 2023, at 02:14, Doug Hardie <bc979@lafn.org> wrote:
>>
>> I believe that adding a couple lines of sh code to the end of 
>> sshd.conf would cause it to read /usr/local/etc/sshd.conf and avoid 
>> those issues.  That is done in other places in the rc process.
>>
>> — Doug
> 
> 
> Yes, it would be great if the stock /etc/sshd_config would include 
> something like
> 
> Include /usr/local/etc/ssh/*
> 
> as the final line. I would never have to touch it again. It’s always a 
> bother keeping it up to date, especially when running lots of jails.

Except that /usr/local/etc/ is for configuration files used by 
ports/packages and not the services from base.

If you want it, then it should be something like this:

Include /etc/ssh/sshd_config.d/*.conf

or this

Include /etc/ssh/sshd_config.d/*.conf
Include /usr/local/etc/ssh/sshd_config.d/*.conf

But search the internet first, there are reported bugs and headaches 
with Include and Match.

Kind regards
Miroslav Lachman