mirror of
https://github.com/openbsd/src.git
synced 2024-12-22 07:27:59 -08:00
856b6ee813
This splits the user authentication code from the sshd-session binary into a separate sshd-auth binary. This will be executed by sshd-session to complete the user authentication phase of the protocol only. Splitting this code into a separate binary ensures that the crucial pre-authentication attack surface has an entirely disjoint address space from the code used for the rest of the connection. It also yields a small runtime memory saving as the authentication code will be unloaded after thhe authentication phase completes. Joint work with markus@ feedback deraadt@ Tested in snaps since last week
16 lines
475 B
Makefile
16 lines
475 B
Makefile
# $OpenBSD: Makefile,v 1.19 2024/10/14 01:57:50 djm Exp $
|
|
|
|
.include <bsd.own.mk>
|
|
|
|
SUBDIR= ssh sshd sshd-session sshd-auth \
|
|
ssh-add ssh-keygen ssh-agent scp sftp-server \
|
|
ssh-keysign ssh-keyscan sftp ssh-pkcs11-helper ssh-sk-helper
|
|
|
|
distribution:
|
|
${INSTALL} -C -o root -g wheel -m 0644 ${.CURDIR}/ssh_config \
|
|
${DESTDIR}/etc/ssh/ssh_config
|
|
${INSTALL} -C -o root -g wheel -m 0644 ${.CURDIR}/sshd_config \
|
|
${DESTDIR}/etc/ssh/sshd_config
|
|
|
|
.include <bsd.subdir.mk>
|