sshd_config AllowStreamLocalForwarding perm off / effectively privsep off

Shaddy Baddah lithium-cygwin@shaddybaddah.name
Mon Aug 7 21:46:51 GMT 2023


Hi,

On 8/08/2023 3:40 am, Corinna Vinschen via Cygwin wrote:
> On Aug  7 22:11, Shaddy Baddah via Cygwin wrote:
..

> 
> Yes, the parts of OpenSSH requiring descriptor passing are disabled in
> OpenSSH.
> 
>> Otherwise, what's the solution?
> 
> Solution for what?  What is it you want to do?

Reverse unix socket forwarding. Like this:

|~aC
|ssh> -R /tmp/p2:/tmp/p1
|Forwarding port.
|debug1: Remote: Server has disabled streamlocal forwarding.

Despite configuration and documentation, this can never work on Cygwin.

And I was looking to what an agreeable patch for OpenSSH might be. But
if I have read the situation right, by policy, there cannot be one for
Cygwin.

I do have a workaround, but it's suboptimal.

-- 
Regards,
Shaddy


More information about the Cygwin mailing list