#1039866 openssh-server: bookworm config enforces outdated extern sftp-server, unable to override

Package:
openssh-server
Source:
openssh-server
Description:
secure shell (SSH) server, for secure access from remote machines
Submitter:
Marc Lehmann
Date:
2023-06-29 00:30:04 UTC
Severity:
normal
#1039866#5
Date:
2023-06-29 00:27:45 UTC
From:
To:
Dear Maintainer,

after upgrading to bookworm, sshd did not come up again. The reason is
that the config file now enforces the usage of the outdated sftp-server
subsystem, and this is not overridable.

Please consider NOT enforcing a specific sftp implementation (going with
the defaults and letting users override it in separate4 conf files), or,
if it has to be done, make it easier to override it, or possibly default
to the modern "internal-sftp" implementation which allows chroot (and thus
provides better defense-in-dpeth in most cases).

Thanks for your work!