similar to: ControlMaster, scp and current working directory

Hi, I posted this question to the OpenBSD bugs list last week, however I have had no reply and it was suggested on IRC that I post here instead. So I must apologise if this is not appropriate. For a reference here is my previous post: https://marc.info/?l=openbsd-bugs&m=156080681530337&w=2 I am running OpenBSD 6.5-stable (also tested on -current). When I ssh somewhere I get a sig abort

Dear Mailing List We are using a ControlMaster with a short ControlPersist to access the bastion host which then gives access to customer hosts. Our Information Security Manager would like to disallow the ControlMaster. His attack scenario is an admin workstation with a compromised root account. An attacker can then use the ControlMaster to trivially get shell access on the bastion host

https://bugzilla.mindrot.org/show_bug.cgi?id=2621 Bug ID: 2621 Summary: ControlMaster started by scp (non-ssh?) doesn't forward agent Product: Portable OpenSSH Version: 7.3p1 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: Miscellaneous

https://bugzilla.mindrot.org/show_bug.cgi?id=2414 Bug ID: 2414 Summary: ControlMaster directive should be ignored on Cygwin Product: Portable OpenSSH Version: -current Hardware: Other OS: Cygwin on NT/2k Status: NEW Severity: enhancement Priority: P5 Component: ssh Assignee:

When I'm running interactive ssh session which is ControlMaster and I run scp or sftp to same host, creating another channel, it seems that ssh is stuffing the packets together exceeding MTU. I've for years ran QoS where I prioritize small packets, as it is clean and easy way to guarantee low latency to pretty much all you care for. Unfortunately ControlMaster packet stuffing breaks this,

I use ControlMaster auto (along with ControlPath) in my ssh config and find it very handy. I have noticed an annoying behavior, though: it seems that if there is no existing master connection and ssh creates a new one, the master connection process that is started has its stderr left open. This has manifested itself in two ways so far: (1) When using ssh day-to-day, I may be doing some work and

https://bugzilla.mindrot.org/show_bug.cgi?id=1382 Summary: scp/sftp sometimes hangs as a ControlMaster slave Classification: Unclassified Product: Portable OpenSSH Version: 4.7p1 Platform: ix86 OS/Version: Mac OS X Status: NEW Severity: normal Priority: P2 Component: scp AssignedTo: bitbucket

http://bugzilla.mindrot.org/show_bug.cgi?id=1278 Summary: CYGWIN controlMaster connections don't work. Product: Portable OpenSSH Version: v4.5p1 Platform: ix86 OS/Version: Cygwin on NT/2k Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: bitbucket at mindrot.org

On Tue, Jan 21, 2020 at 11:08:51AM +1100, Damien Miller wrote: > So IMO disallowing session multiplexing is at most a speedbump that an > attacker will cross with relative ease. Speedbumps make sense sometimes, An attacker getting root on the jumphost gets immediate control of any _current_ persistent connections and new connections. Without ControlMaster it's a _lot_ harder to take

https://bugzilla.mindrot.org/show_bug.cgi?id=2420 Bug ID: 2420 Summary: Race condition regarding ControlPersist and ControlMaster=auto Product: Portable OpenSSH Version: 6.6p1 Hardware: amd64 OS: Linux Status: NEW Severity: normal Priority: P5 Component: ssh

There is a race in the setup of the ControlMaster socket in auto mode, as illustrated by the following command line: ssh -oControlMaster=auto -oControlPath=sock localhost 'sleep 1; echo 1' & ssh -oControlMaster=auto -oControlPath=sock localhost 'sleep 2; echo 2' & Both of the commands will try to start up as a control client, find that sock does not exist, and switch into

https://bugzilla.mindrot.org/show_bug.cgi?id=2437 Bug ID: 2437 Summary: ssh with ControlMaster and ControlPath hangs on 2nd session in same terminal Product: Portable OpenSSH Version: 6.7p1 Hardware: amd64 OS: Linux Status: NEW Severity: normal Priority: P5

https://bugzilla.mindrot.org/show_bug.cgi?id=1938 Bug #: 1938 Summary: EscapeChar sometimes don't work when using ControlMaster Classification: Unclassified Product: Portable OpenSSH Version: 5.8p1 Platform: ix86 OS/Version: Linux Status: NEW Severity: normal Priority: P2

Rsync does not seem to feature include directives as samba in order to manage the config file in several seperate ones. I would like to know if I am right and in that case, I suggest it would be an interesting feature. Separating the configuration of the server itself from the ressources it offers (the modules) allows a simplest management of conffiles through a package management system: the

https://bugzilla.mindrot.org/show_bug.cgi?id=1994 Bug #: 1994 Summary: document which settings/etc. get "persistent" with the ControlMaster connection Classification: Unclassified Product: Portable OpenSSH Version: 5.9p1 Platform: All OS/Version: All Status: NEW Severity:

https://bugzilla.mindrot.org/show_bug.cgi?id=1617 Summary: -L & -R do not work for slave ControlMaster connections Product: Portable OpenSSH Version: 5.1p1 Platform: ix86 OS/Version: FreeBSD Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: unassigned-bugs

https://bugzilla.mindrot.org/show_bug.cgi?id=1517 Summary: ssh ControlMaster process is crashing frequently when multiplexing ssh and scp connections with error 'select: Invalid argument' Product: Portable OpenSSH Version: 5.1p1 Platform: Sparc OS/Version: Solaris Status: NEW

TL;DR: I expect ProxyCommand to have effect in preference to ControlPath. I've just tripped over this one. I have an ssh Host (let us call it "MAIN") with a ControlPath and with ControlMaster=no, from the .ssh/config file. I also have a shell script whose purpose is to hop to a remote host through a port forward, which uses the ProxyCommand option like this: ProxyCommand ssh

https://bugzilla.mindrot.org/show_bug.cgi?id=2065 Bug ID: 2065 Summary: double confirmation with ssh-add -c and ControlMaster autoask Classification: Unclassified Product: Portable OpenSSH Version: 6.0p1 Hardware: All OS: Linux Status: NEW Severity: normal Priority: P3

https://bugzilla.mindrot.org/show_bug.cgi?id=3589 Bug ID: 3589 Summary: ControlMaster auto, persist and -f fail. Product: Portable OpenSSH Version: 9.3p1 Hardware: amd64 OS: Linux Status: NEW Severity: minor Priority: P5 Component: ssh Assignee: unassigned-bugs at mindrot.org