Edit

IABSD.fr/src/usr.bin/ssh/Makefile

Branch :

  • Show log

    Commit

  • Author : djm
    Date : 2024-10-14 01:57:50
    Hash : 856b6ee8
    Message : Split per-connection sshd-session binary This splits the user authentication code from the sshd-session binary into a separate sshd-auth binary. This will be executed by sshd-session to complete the user authentication phase of the protocol only. Splitting this code into a separate binary ensures that the crucial pre-authentication attack surface has an entirely disjoint address space from the code used for the rest of the connection. It also yields a small runtime memory saving as the authentication code will be unloaded after thhe authentication phase completes. Joint work with markus@ feedback deraadt@ Tested in snaps since last week

  • usr.bin/ssh/Makefile
  • #	$OpenBSD: Makefile,v 1.19 2024/10/14 01:57:50 djm Exp $
    
    .include <bsd.own.mk>
    
    SUBDIR=	ssh sshd sshd-session sshd-auth \
    	ssh-add ssh-keygen ssh-agent scp sftp-server \
    	ssh-keysign ssh-keyscan sftp ssh-pkcs11-helper ssh-sk-helper
    
    distribution:
    	${INSTALL} -C -o root -g wheel -m 0644 ${.CURDIR}/ssh_config \
    	    ${DESTDIR}/etc/ssh/ssh_config
    	${INSTALL} -C -o root -g wheel -m 0644 ${.CURDIR}/sshd_config \
    	    ${DESTDIR}/etc/ssh/sshd_config
    
    .include <bsd.subdir.mk>