Re: Unix socket support for sshd

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



On 2016-02-04 19:31, Daniel Kahn Gillmor wrote:
> Note that the daemon management service (what systemd's pid 1 provides)
> needs some way to communicate to the spawned daemon which file
> descriptors it has inherited should be treated as listeners.  for
> systemd, this is a contiguious block of file descriptors starting at fd
> 3 (SD_LISTEN_FDS_START), and the enviornment variable LISTEN_FDS is a
> decimal number indicating how many file descriptors to use for listening
> (see sd_listen_fds(3) from libsystemd for more detail).
> 
> A reasonable approach that would avoid linking in libsystemd might be to
> just specify something like ListenFDs N:M (meaning file descriptors N
> through M are sockets you should listen on).  (perhaps -L N:M on the
> command line, so that the config file could stay static and the spawning
> daemon manager could dynamically adjust the invocation as sockets were
> added or removed)
> 
>       --dkg

FWIW, for single-socket configurations, systemd also supports the
inetd-compatible style of assigning the socket directly to fd's 0-2 (stdio).

I've tested it with both `sshd -i` in Accept=yes ("nowait") mode, and
with Exim4 in Accept=no ("wait") mode. It works fine with `sshd -i`.

Also, I assume the scary key generation warning in sshd's manpage only
applies to protocol 1?

-- 
Mantas Mikulėnas <grawity@xxxxxxxxx>

[Not sure if this'll reach the list via GMANE, but here goes.]
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev




[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux