[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openssh-unix-dev
Subject:    Re: Unset a given SendEnv?
From:       Philipp Marek <philipp () marek ! priv ! at>
Date:       2018-07-04 10:31:18
Message-ID: b642aa6ffbb1d7888b6d8ad27c99fb93 () marek ! priv ! at
[Download RAW message or body]

Hi Damien,


> HEAD has the ability to clear one using SendEnv=-FOO, but I'm toying
> with the idea of breaking backwards compatibility and making SendEnv
> behave like the rest of the options and be first match wins.
> 
> What do you all think?
Oh no, please don't.

Allowing multiple SendEnv lines makes it much easier to automatically 
(and manually!) check and fix the configuration - a simple
    if ! grep ... ; then echo ... >>  ... ; fi
is good enough to get some known-good lines into sshd_config.

Visually it's easier to see the common, expected patterns than
to look at a line of indeterminate length as well.


So yes, SendEnv=-FOO sounds good to me.
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
[prev in list] [next in list] [prev in thread] [next in thread]