https://bugzilla.mindrot.org/show_bug.cgi?id=2784
--- Comment #17 from Damien Miller <[email protected]> --- Right now there are no use cases, these patches add them for the first time. The functionality in question here is: 1. Being able to tell sshd to listen in an explicit rdomain/VRF. This is the first patch, implementing ListenAddress addr[:port] [rdomain domain] This seems like SO_BINDTODEVICE will work fine. 2. Being able to set the rdomain/VRF for sshd, so the user session as well as any sockets created for forwardings end up in an rdomain. This is the second patch, implementing RDomain domain I can't see how SO_BINDTODEVICE will work here, because it won't affect sshd's child processes (e.g. the user's shell). OpenBSD provides a setrtable(2) syscall to do this that has sensible semantics: https://man.openbsd.org/setrtable.2 -- You are receiving this mail because: You are watching someone on the CC list of the bug. You are watching the assignee of the bug. _______________________________________________ openssh-bugs mailing list [email protected] https://lists.mindrot.org/mailman/listinfo/openssh-bugs
