Comment by mmsc
3 months ago
Except that doesn't tell you what it's doing, that tells you what it _might_ do, if you (re)start the server.
sshd -T reads the configuration file and prints information. It doesn't print what the server's currently-running configuration is: https://joshua.hu/sshd-backdoor-and-configuration-parsing
That's why I only use socket-activated per-connection instances of sshd.
Every configuration change immediately applies to every new connection - no need to restart the service!
socket-activated per-connection instances
Yay, they reinvented inetd too!
It's not like they (as in OpenSSH) did, but that's an (IMHO very under-utilized) standard feature of systemd that's been there basically since the very beginning.