John Safranek 0f4002bc4e wolfsshd: apply ForceCommand to SFTP and SCP ... A ForceCommand other than a bare "internal-sftp" now denies the SFTP subsystem, and any ForceCommand denies SCP, as sshd_config(5) describes it: a forced command applies to shell, command, and subsystem execution. The session dispatch checks the configured command alongside a certificate's, so either one on its own confines the session. - the subsystem arm and both SCP arms consult the configured ForceCommand, not only a certificate's force-command - "internal-sftp" followed by options denies SFTP, since no option is applied, while the shell still refuses it as "internal-sftp" - every site testing for "internal-sftp" now shares one predicate - root's transfer refusal no longer points at ForceCommand internal-sftp, which does not permit SCP - tests require a ForceCommand to deny SFTP and SCP, read the daemon's decisions from its log, and pair a configured internal-sftp with a cert Issue: ZD-22623 Issue: F-10597		2026-10-30 13:51:24 -05:00
..
wolfssh	Reject an out-of-range -p port	2026-10-28 13:10:29 -05:00
wolfsshd	wolfsshd: apply ForceCommand to SFTP and SCP	2026-10-30 13:51:24 -05:00
include.am	Add wolfssh-options build option probe	2026-08-19 16:55:00 -07:00
wolfssh-options.c	Fix ML-DSA composite logic from code review	2026-09-21 11:11:16 -07:00