[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAM=PXV5NkBC+qaYbxfvZMkAGXz6RirLwKAmwSCi1YfUsOF0qXg@mail.gmail.com>
Date: Mon, 29 Dec 2025 08:33:39 -0700
From: Greg Dahlman <dahlman@...il.com>
To: jcb62281@...il.com
Cc: oss-security@...ts.openwall.com
Subject: Re: Systemd vsock sshd
The official way to disable this behavior requires appending
"systemd.ssh_auto=no" to the kernel boot line.
https://man7.org/linux/man-pages/man8/systemd-ssh-generator.8.html
On Sun, Dec 28, 2025 at 9:11 PM Jacob Bachmeyer <jcb62281@...il.com> wrote:
> On 12/27/25 21:46, Greg Dahlman wrote:
> > [...]
> >
> > **Systemd v256 change** - When the *openssh-server* package is
> > installed on a VM with vsock support, systemd now automatically
> > starts an *sshd* instance that listens on the **af_vsock** socket in
> > the **global network namespace** without any manual configuration.
>
> Obvious question: what manual configuration is required to kill that
> listener?
>
>
> -- Jacob
>
>
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
