upstream: allow the IgnoreRhosts directive to appear anywhere in a
sshd_config, not just before any Match blocks; bz3148, ok dtucker@ OpenBSD-Commit-ID: e042467d703bce640b1f42c5d1a62bf3825736e8
This commit is contained in:
parent
ca5403b085
commit
321c714707
|
@ -1,5 +1,5 @@
|
||||||
|
|
||||||
/* $OpenBSD: servconf.c,v 1.361 2020/03/06 18:29:54 markus Exp $ */
|
/* $OpenBSD: servconf.c,v 1.362 2020/04/17 03:23:13 djm Exp $ */
|
||||||
/*
|
/*
|
||||||
* Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
|
* Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
|
||||||
* All rights reserved
|
* All rights reserved
|
||||||
|
@ -626,7 +626,7 @@ static struct {
|
||||||
#else
|
#else
|
||||||
{ "printlastlog", sPrintLastLog, SSHCFG_GLOBAL },
|
{ "printlastlog", sPrintLastLog, SSHCFG_GLOBAL },
|
||||||
#endif
|
#endif
|
||||||
{ "ignorerhosts", sIgnoreRhosts, SSHCFG_GLOBAL },
|
{ "ignorerhosts", sIgnoreRhosts, SSHCFG_ALL },
|
||||||
{ "ignoreuserknownhosts", sIgnoreUserKnownHosts, SSHCFG_GLOBAL },
|
{ "ignoreuserknownhosts", sIgnoreUserKnownHosts, SSHCFG_GLOBAL },
|
||||||
{ "x11forwarding", sX11Forwarding, SSHCFG_ALL },
|
{ "x11forwarding", sX11Forwarding, SSHCFG_ALL },
|
||||||
{ "x11displayoffset", sX11DisplayOffset, SSHCFG_ALL },
|
{ "x11displayoffset", sX11DisplayOffset, SSHCFG_ALL },
|
||||||
|
@ -2473,6 +2473,7 @@ copy_set_server_options(ServerOptions *dst, ServerOptions *src, int preauth)
|
||||||
M_CP_INTOPT(kbd_interactive_authentication);
|
M_CP_INTOPT(kbd_interactive_authentication);
|
||||||
M_CP_INTOPT(permit_root_login);
|
M_CP_INTOPT(permit_root_login);
|
||||||
M_CP_INTOPT(permit_empty_passwd);
|
M_CP_INTOPT(permit_empty_passwd);
|
||||||
|
M_CP_INTOPT(ignore_rhosts);
|
||||||
|
|
||||||
M_CP_INTOPT(allow_tcp_forwarding);
|
M_CP_INTOPT(allow_tcp_forwarding);
|
||||||
M_CP_INTOPT(allow_streamlocal_forwarding);
|
M_CP_INTOPT(allow_streamlocal_forwarding);
|
||||||
|
|
|
@ -33,8 +33,8 @@
|
||||||
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
||||||
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
.\"
|
.\"
|
||||||
.\" $OpenBSD: sshd_config.5,v 1.307 2020/02/07 03:54:44 dtucker Exp $
|
.\" $OpenBSD: sshd_config.5,v 1.308 2020/04/17 03:23:13 djm Exp $
|
||||||
.Dd $Mdocdate: February 7 2020 $
|
.Dd $Mdocdate: April 17 2020 $
|
||||||
.Dt SSHD_CONFIG 5
|
.Dt SSHD_CONFIG 5
|
||||||
.Os
|
.Os
|
||||||
.Sh NAME
|
.Sh NAME
|
||||||
|
@ -1162,6 +1162,7 @@ Available keywords are
|
||||||
.Cm HostbasedAcceptedKeyTypes ,
|
.Cm HostbasedAcceptedKeyTypes ,
|
||||||
.Cm HostbasedAuthentication ,
|
.Cm HostbasedAuthentication ,
|
||||||
.Cm HostbasedUsesNameFromPacketOnly ,
|
.Cm HostbasedUsesNameFromPacketOnly ,
|
||||||
|
.Cm IgnoreRhosts ,
|
||||||
.Cm Include ,
|
.Cm Include ,
|
||||||
.Cm IPQoS ,
|
.Cm IPQoS ,
|
||||||
.Cm KbdInteractiveAuthentication ,
|
.Cm KbdInteractiveAuthentication ,
|
||||||
|
|
Loading…
Reference in New Issue