CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/03/01 19:40:15
Modified files:
usr.bin/ssh : sshd-session.c sshd-auth.c packet.h
monitor_wrap.h monitor_wrap.c monitor.h
monitor.c compat.c
Log message:
Move banner exchange to sshd-auth process
Previously, exchange of the initial SSH- banners was performed
by the privileged sshd-session monitor. This moves it to the
unprivileged sshd-auth subprocess, removing ~200 LoC from the
monitor's privileged attack surface.
The monitor gains a new "setcompat" RPC to allow sshd-auth to
inform it of bug compat flags picked up from the client's banner.
feedback dtucker@, ok markus@ deraadt@
