#1014234 sshd: Move Include at the end to allow overriding default values

Package:
openssh-server
Source:
openssh
Description:
secure shell (SSH) server, for secure access from remote machines
Submitter:
Gioele Barabucci
Date:
2022-07-02 16:00:04 UTC
Severity:
normal
#1014234#5
Date:
2022-07-02 15:10:32 UTC
From:
To:
Dear openssh maintainers,

could you please move the `Include /etc/ssh/sshd_config.d/*.conf` line
to the end of `/etc/sshd_config`?

Having that line at the beginning of the file makes it impossible to
override in `.d` files the default settings set after it, for example
`PasswordAuthentication` or `AcceptEnv`.

Regards,
#1014234#10
Date:
2022-07-02 15:23:12 UTC
From:
To:
man:sshd_config(8) says "For each keyword, the first obtained value
will be used."

So having the `Include` at the beginning seems correct to allow
overriding the contents of /etc/ssh/sshd_config.

Ansgar
#1014234#15
Date:
2022-07-02 15:51:00 UTC
From:
To:
Thanks for the explanation. I was assuming a more "imperative" semantics
where the last value wins. Sorry for the noise.

Kind regards,