Bug#1014234: sshd: Move Include at the end to allow overriding default values

Ansgar <[email protected]>
Newsgroups gmane.linux.debian.devel.ssh
Message-ID <c794a6ed07acba48fc1731dbbe1ee40216fba97d.camel__49238.1069970847$1656776185$gmane$org@43-1.org>
On Sat, 2 Jul 2022 17:10:32 +0200 Gioele Barabucci wrote:
> could you please move the `Include /etc/ssh/sshd_config.d/*.conf` line 
> to the end of `/etc/sshd_config`?
> 
> Having that line at the beginning of the file makes it impossible to 
> override in `.d` files the default settings set after it, for example 
> `PasswordAuthentication` or `AcceptEnv`.

man:sshd_config(8) says "For each keyword, the first obtained value
will be used."

So having the `Include` at the beginning seems correct to allow
overriding the contents of /etc/ssh/sshd_config.

Ansgar
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.