# NousResearch/hermes-agent · macOS SSH security check false-positive warnings

## Open now

- 1 issue, 1 PR open on GitHub.
- #91819: Startup security audit false-positives on macOS: SSH check never verifies sshd is running
- PR #78073: fix: suppress macOS SSH warning when Remote Login is off

These issues and fixes address a startup security audit that incorrectly warns about SSH password authentication on macOS even when no SSH daemon is running or Remote Login is disabled. The work focuses on making the check verify that sshd is actually listening before emitting a warning.

## TL;DR

- 3 member(s): 1 open issue(s), 0 closed issue(s), 1 open PR(s), 0 merged PR(s), 1 PR(s) closed without merging.
- No fix has been merged to main; one or more PRs were attempted (see below).
- **Recommended:** review the prior/competing PR(s) below. A fix was attempted but not merged; your case may extend or revive that work.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.67`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Open related issues

- #91819: Startup security audit false-positives on macOS: SSH check never verifies sshd is running

## Prior & competing PRs

- **#78073: fix: suppress macOS SSH warning when Remote Login is off**. open
  - maintainer direction: category `implemented_elsewhere`; implication `superseded`; refs `44c19378d1`, `cb757fac59`
  - files: `hermes_cli/security_audit_startup.py`, `tests/hermes_cli/test_security_audit_startup.py`
- **#91821: fix(security): only warn about SSH password auth when a daemon is listening**. closed without merge
  - maintainer direction: category `superseded_by_pr`; implication `superseded`; refs `#78073`, `#91819`

## Fix status

- No merged fix on record.
- Subsystem: `hermes_cli`