oss-sec mailing list archives

Re: Systemd vsock sshd


From: Greg Dahlman <dahlman () gmail com>
Date: Mon, 29 Dec 2025 08:33:39 -0700

The official way to disable this behavior requires appending
"systemd.ssh_auto=no" to the kernel boot line.

https://man7.org/linux/man-pages/man8/systemd-ssh-generator.8.html

On Sun, Dec 28, 2025 at 9:11 PM Jacob Bachmeyer <jcb62281 () gmail com> wrote:

On 12/27/25 21:46, Greg Dahlman wrote:
[...]

  **Systemd v256 change** - When the *openssh-server* package is
  installed on a VM with vsock support, systemd now automatically
  starts an *sshd* instance that listens on the **af_vsock** socket in
  the **global network namespace** without any manual configuration.

Obvious question:  what manual configuration is required to kill that
listener?


-- Jacob



Current thread: