Re: disabling local-to-local transfers?

"Theo de Raadt" <[email protected]> Sat, 25 Jul 2026 10:03:19 -0600
Newsgroups gmane.network.openssh.devel
Message-ID <[email protected]>
QnJpYW4gQ2FuZGxlciA8Yi5jYW5kbGVyQHBvYm94LmNvbT4gd3JvdGU6Cgo+IE9uIDI1LzA3LzIw
MjYgMDI6MDUsIERhbWllbiBNaWxsZXIgd3JvdGU6Cj4gPiAJZm9yIGF2IGluICIkQCIgOyBkbwo+
ID4gCQlpZiB0ZXN0IC16ICIkX2ZsYWdzZG9uZSIgOyB0aGVuCj4gPiAJCQljYXNlICIkYXYiIGlu
Cj4gPiAJCQktKikgY29udGludWUgOzsKPiA+IAkJCSopIF9mbGFnc2RvbmU9MSA7Owo+ID4gCQkJ
ZXNhYwo+ID4gCQlmaQo+ID4gCQljYXNlICIkYXYiIGluCj4gPiAJCSo6KikgX3JlbW90ZT0xIDs7
Cj4gPiAJCWVzYWMKPiA+IAlkb25lCj4gCj4gVGhhdCdzIGEgcm91Z2ggaGV1cmlzdGljLiBJIHRo
aW5rIHRoYXQgcHJvcGVybHkgcGFyc2luZyBzY3AgYXJndW1lbnRzCj4gaXMgaGFyZCwgZS5nLgo+
IAo+IMKgIMKgIHNjcCAtSiAyMDAxOmRiODo6MSBmb28gYmFyCj4gCj4gQSBmdWxseS1mdW5jdGlv
bmFsIHdyYXBwZXIgd291bGQgbGlrZWx5IGhhdmUgdG8gZHVwbGljYXRlIHRoZSBlbnRpcmUKPiBh
cmd1bWVudCBwYXJzaW5nIGNvZGUgZnJvbSBzY3AuCj4gCj4gRldJVzogSSd2ZSBoYWQgYSBmZXcg
Y2FzZXMgb3ZlciB0aGUgeWVhcnMgb2YgYWNjaWRlbnRhbGx5IGNyZWF0aW5nCj4gbG9jYWwgZmls
ZSBjb3BpZXMsIGFuZCBJJ3ZlIG5ldmVyICppbnRlbnRpb25hbGx5KiB1c2VkIHNjcCBmb3IgbG9j
YWwKPiBjb3B5aW5nLiBJZiB0aGUgcHJvcG9zZWQgZmVhdHVyZSB3ZXJlIGF2YWlsYWJsZSwgSSdk
IGNlcnRhaW5seSB0dXJuIGl0Cj4gb24gaW4gbXkgb3duIH4vLnNzaC9jb25maWcuCgpPaCBncmVh
dCwgYW5vdGhlciBmaWN0aW9uIQoKc2NwIGRvZXMgbm90IG9wZW4gb3IgcmVhZCB+Ly5zc2gvY29u
ZmlnCgpIYXZpbmcgc2NwIG9wZW4gYW5kIHBhcnNlIHRoYXQgZmlsZSwgd2hpY2ggcmVxdWlyZXMg
dGhvdXNhbmRzIG9mIGxpbmVzCm9mIGNvZGUgaW4gdGhlIG9wdGlvbiBwYXJzZXIgZG9lc24ndCBt
YWtlIHNlbnNlLgoKSXQgaXMgaGlnaGx5IGxpa2VseSB0aGF0IHNvbWVvbmUgaGFzIGEgc2NyaXB0
IHJ1bm5pbmcgc2NwIGluc2lkZSBzb21lCnNvcnQgb2YgZmlsZXN5c3RlbSBjb250YWlubWVudCBt
ZWNoYW5pc20gdGhhdCB3b3VsZCBmYWlsCmNhdGFzdHJvcGhpY2FsbHkgYmVjYXVzZSB0aGUgfi8g
ZGlyZWN0b3J5IGlzIGludGVudGlvbmFsbHkgaGlkZGVuLCBhbmQKdGhlcmVmb3JlIGJyZWFrIHRo
ZSBjb21tYW5kIHdpbGwgYmVoYXZlIGRpZmZlcmVudGx5LCBhbmQgc29tZW9uZSdzIGRhdGEKcGlw
ZWxpbmUgd2lsbCBkZXZlbG9wIGEgIm5ldyBiZWhhdmlvciIuCgpJJ2xsIHJlcGVhdCB0aGUgY2h1
bmsgZnJvbSB0aGUgbWFudWFsIHBhZ2U6CgogICAgIFRoZSBzb3VyY2UgYW5kIHRhcmdldCBtYXkg
YmUgc3BlY2lmaWVkIGFzIGEgbG9jYWwgcGF0aG5hbWUsIGEgcmVtb3RlIGhvc3QKICAgICB3aXRo
IG9wdGlvbmFsIHBhdGggaW4gdGhlIGZvcm0gW3VzZXJAXWhvc3Q6W3BhdGhdLCBvciBhIFVSSSBp
biB0aGUgZm9ybQogICAgIHNjcDovL1t1c2VyQF1ob3N0Wzpwb3J0XVsvcGF0aF0uICBMb2NhbCBm
aWxlIG5hbWVzIGNhbiBiZSBtYWRlIGV4cGxpY2l0CiAgICAgdXNpbmcgYWJzb2x1dGUgb3IgcmVs
YXRpdmUgcGF0aG5hbWVzIHRvIGF2b2lkIHNjcCB0cmVhdGluZyBmaWxlIG5hbWVzCiAgICAgY29u
dGFpbmluZyBgOicgYXMgaG9zdCBzcGVjaWZpZXJzLgoKVGhlIGNvZGUgd2hpY2ggZG9lcyB0aGlz
IHdhcyBpbiB0aGUgYW5jZXN0b3IgcmNwLmMgYmVmb3JlIG1hbnkgb2YgeW91CndlcmUgYm9ybi4K
Ckl0IGlzIHRvbyBsYXRlLgoKSSBoYXZlIHBlcnNvbmFsbHkgc3BlbnQgZGVjYWRlcyB3b3JraW5n
IHdpdGggb3RoZXJzIHRvIGNoYW5nZSB0aGUKYmVoYXZpb3VyIG9mIGVzdGFibGlzaGVkIHByb2dy
YW1zIGZvciB2YXJpb3VzIHJlYXNvbnMsIGFuZCBhbHdheXMgdGhlCnByb2Nlc3MgaXMgdG8gcmUt
ZGlzY292ZXIgYWxsIGJlaGF2aW91cnMgdGhhdCBzdGFuZCBpbiB0aGUgd2F5IG9mIGEKY2hhbmdl
LCB0aGVuIHByb3RvdHlwZSBmaXhlcyBmb3IgdGhvc2UgZXhpc3RpbmcgdXNlIGNhc2VzIHRvIHNh
dGlzZnkgdGhlCm5ldyBwcm9wb3NlZCBiZWhhdmlvdXIsIE9SIHJlY29nbml6ZSB0aGF0IHRoZSBi
ZWhhdmlvdXIgY2hhbmdlIGZhY2VzIHRvbwpoaWdoIGEgYmFycmllciBhbmQgZmluZCBhIGRpZmZl
cmVudCB3YXkgb3IgYWJhbmRvbiB0aGUgZWZmb3J0LiAgVGhhdCBpcwpub3QgYmVpbmcgZG9uZSBi
eSBhbnlvbmUgaGVyZSwgc28gdGhlIHByb3Bvc2FsIGFuZCByZXF1ZXN0IGlzCnVuZWR1Y2F0ZWQs
IHVuanVzdGlmaWVkLCBhbmQgZnJhbmtseSBpcnJlc3BvbnNpYmxlLgpfX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpvcGVuc3NoLXVuaXgtZGV2IG1haWxpbmcg
bGlzdApvcGVuc3NoLXVuaXgtZGV2QG1pbmRyb3Qub3JnCmh0dHBzOi8vbGlzdHMubWluZHJvdC5v
cmcvbWFpbG1hbi9saXN0aW5mby9vcGVuc3NoLXVuaXgtZGV2Cg==