Comment 1 for bug 1922130

Revision history for this message
Paride Legovini (paride) wrote :

Hi Mark and thanks for this bug report. I can see how the flag introduced by the "sftp-force-permissions" patch could come handy, however I doubt we are going to include in the Ubuntu package unless there's a compelling reason for doing so. And if such a compelling reason did exist, then I think it should be brought to the attention of the upstream openssh developers, without delivering the functionality with a distribution specific patch.

My suggestion here is to:

 - Poke upstream about this. Note that they may have a good rationale for *not* including the patch, given that it's small and they didn't already do so.

 - File a bug in Debian. The Ubuntu openssh package is almost a sync from Debian, which is another good reason to avoid including an additional delta to it, with all its long-term implications (old memories here: [1]). If Debian includes the patch then Ubuntu will pick it up with the following package syncs or merges.

I'm going to triage this as a Wishlist bug for now. This is not a final word, but I doubt the importance of this bug is likely to be bumped without a compelling use case that would be enabled by adding the patch.

[1] https://www.debian.org/security/2008/dsa-1571