From: Kevin Chadwick <kc-openbsd@chadwicks.me.uk>
Subject: Re: OpenBSD 8.0: released Oct 20, 2026
To: tech@openbsd.org
Date: Tue, 20 Oct 2026 16:06:08 +0100



-------- Original Message --------

>  - OpenSSH 10.6:
>     o Security fixes:
>        - Disabled ssh(1) LZ77 dictionary coder to avoid a potential
>          side-channel leak.
>        - Fixed ChannelTimeout and RekeyLimit not being applied in
>          sshd_config(5).
>        - Made ssh(1) authorized_keys "restrict" keyword apply
>          correctly to tunnel forwarding.

I don't think I really need the restrict keyword between two trusted servers so
I have just removed it. I had to remove it because I was getting:

"Remote: Server has rejected tunnel device forwarding"

Have I just failed to see the relevant option that overrides restrict in man sshd?

-- 
All the best,
             Kevin Chadwick