Re: disabling local-to-local transfers?

"Theo de Raadt" <[email protected]> Mon, 27 Jul 2026 08:36:37 -0600
Newsgroups gmane.network.openssh.devel
Message-ID <[email protected]>
Eloi Benoist-Vanderbeken <[email protected]> wrote:

> Hi,
> 
> My two cents: there is probably several scripts using scp for both remote and local copies. I'm sure I've already did that to be able to deploy things both locally and remotely depending on an argument, it saves an if.
> 
> Breaking them doesn't sound like a good idea. If disabling local-to-local transfers becomes an option, it should be "opt-in".

The local-to-local feature is already opt-in.

To do a local-to-local copy, you must flag the request by not using ':'

If you use 'host:' on either the source or target, the local-to-local code
is not reached.