Call for testing: OpenSSH 7.6

Damien Miller
Fri, 22 Sep 2017 00:04:29 -0000

On Thu, 21 Sep 2017, Colin Watson wrote:

> On Thu, Sep 21, 2017 at 10:47:59AM +1000, Damien Miller wrote:
> > Running the regression tests supplied with Portable OpenSSH does not
> > require installation and is a simply:
> >
> > $ ./configure && make tests
>
> All tests pass on Debian unstable amd64 (using openssh.git master).
>
> I don't suppose it would be possible to get
> https://bugzilla.mindrot.org/show_bug.cgi?id=2752 into 7.6?  We're
> carrying those patches at the moment, but I'd like to avoid having to
> carry sandbox patches if possible.

I don't think that will make it, and I don't much like some of the
changes
in those patches (e.g. adding SysV IPC). IMO it would be better to disable
the OpenSSL engine that requires it for the pre-auth phase entirely.

-d