[MacPorts] #72482: openssh 10.0p2 fails to setup sandbox (and connections fail)

MacPorts noreply at macports.org
Sat May 31 21:59:14 UTC 2025


#72482: openssh 10.0p2 fails to setup sandbox (and connections fail)
-------------------------+----------------------
  Reporter:  danielluke  |      Owner:  artkiver
      Type:  defect      |     Status:  reopened
  Priority:  Normal      |  Milestone:
 Component:  ports       |    Version:
Resolution:              |   Keywords:
      Port:  openssh     |
-------------------------+----------------------

Comment (by iamGavinJ):

 Replying to [comment:13 artkiver]:
 > Replying to [comment:12 iamGavinJ]:
 > > Removing the launchd `-l` flag for ssh-agent, via the patch, has
 completely broken my setup.  I realise I'm likely in the minority by
 configuring my own LaunchAgent plist, but having launchd control the
 SSH_AUTH_SOCK is far superior when utilising the agent across multiple
 apps (git/vscode/ssh), instead of now having to rely on shell startup
 scripts.
 > >
 > > I also can't see how the `-l` switch was actively causing a problem,
 and why it was removed, when the upside is feature parity with the native
 macOS version, with no known downside.
 > >
 > > I would very much appreciate if this change could be rolled back.
 >
 > Thanks for the perspective!
 >
 > I am definitely OK with launchd and sandbox patches being reworked, but
 my previous attempts to do so, were failures. Basically I got as far as
 modifying the previous patches which would fail to apply entirely to the
 10.0p2 source.
 >
 > My efforts should still be attached for reference here:
 https://trac.macports.org/ticket/72317 Unfortunately, while my reworked
 patches did apply "cleanly" to the 10.0p2 source, the patched sources were
 still breaking at compile time. ;-/
 >
 > Rather than rollback to a previous version of OpenSSH, I think a better
 course of action would be to rework my failed patch attempts? But I may
 not be the right person for those fixes, given that I previously tried and
 failed to make them work.

 Agreed, failing forward is better due to the removal of macOS sandboxing
 removal.

 I've attached my patches which work.

-- 
Ticket URL: <https://trac.macports.org/ticket/72482#comment:14>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list