[Bug 3597] Why do we check both nsession_ids and remote_add_provider when judging whether allow remote addition of FIDO/PKCS11 provider libraries is disabled?

2023-08-02 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3597 --- Comment #3 from Damien Miller --- > For lower version, before openssh-8.9p1, only checking the > value of remote_add_provider is stricter, although it may > cause some problems else. That won't work. Older versions have no way of telling

[Bug 3597] Why do we check both nsession_ids and remote_add_provider when judging whether allow remote addition of FIDO/PKCS11 provider libraries is disabled?

2023-08-02 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3597 --- Comment #2 from renmingshuai --- (In reply to Damien Miller from comment #1) > remote_add_provider indicates whether the user has allowed remote > ssh-agent clients to add PKCS#11 providers. > > e->nsession_ids>0 indicates that a session is