On Mon, Jul 01, 2024 at 12:59:05 +0200, Geert Hendrickx wrote:
More specifically, the upgraded server logs the following: sshd: -R not supported here
(when forked by a not-restarted master process)
I can't immediatly spot in the ChangeLog what is causing this, but it certainly warrants a big post_upgrade warning in the openssh package.
It's due to this change, sshd now invokes an sshd-session handler instead, for which the master process MUST be restarted: https://www.openssh.com/releasenotes.html#9.8p1
* sshd(8): the server has been split into a listener binary, sshd(8), and a per-session binary "sshd-session". This allows for a much smaller listener binary, as it no longer needs to support the SSH protocol. As part of this work, support for disabling privilege separation (which previously required code changes to disable) and disabling re-execution of sshd(8) has been removed. Further separation of sshd-session into additional, minimal binaries is planned for the future.
(it's probably advised to restart sshd immediatly after every upgrade, but the package should point this out as Arch does not automate this.) Geert