Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by bozey07 | Hacker News Reader

Full thread

bozey07·

Interesting; will this change propagate to Linux? I don't know how intertwined OpenBSD and Linux' OpenSSHes are.

View on HN

> I don't know how intertwined OpenBSD and Linux' OpenSSHes are

There is only one OpenSSH, and it is developed by the OpenBSD folks and used by everyone else.

But the OpenSSH they have in OpenBSD is maintained in-tree I think. And then they have the portable OpenSSH that they maintain separately for other systems to use. And then changes in either are probably integrated into the other keeping them largely the same.

But there surely are some features in either that are intentionally kept out of the other?

One of these is probably the recently upstream added sd_notify support, as the BSDs currently (or probably ever) dont support systemd.

But the notification mechanism isn't really systemd specific, so maybe they can make use of it somehow for something, dunno.

https://github.com/openssh/openssh-portable/commit/08f579231...

Yes, that is what I am talking about. This has no use for it in the in-tree openssh of BSD, so it wouldn't surprise me if this specific patch is omitted from the in-tree variant.

> This is a port of OpenBSD's OpenSSH to most Unix-like operating systems, including Linux, OS X and Cygwin. Portable OpenSSH polyfills OpenBSD APIs that are not available elsewhere, adds sshd sandboxing for more operating systems and includes support for OS-native authentication and auditing (e.g. using PAM).

* https://github.com/openssh/openssh-portable

Perhaps see specifically the "openbsd-compat" directory, otherwise I think the source tree is very close the the 'OpenBSD version':

* https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/

Yes: https://github.com/openssh/openssh-portable/commit/03e3de416...

Reply on news.ycombinator.com