upstream: mention that permitopen=/PermitOpen do no name to address

translation; prompted by bz3099

OpenBSD-Commit-ID: 0dda8e54d566b29855e76bebf9cfecce573f5c23
This commit is contained in:
djm@openbsd.org 2020-01-25 06:03:10 +00:00 committed by Damien Miller
parent e1e97cae19
commit 734f2f83f5
2 changed files with 9 additions and 7 deletions

8
sshd.8
View File

@ -33,8 +33,8 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: sshd.8,v 1.311 2019/12/21 20:22:34 naddy Exp $ .\" $OpenBSD: sshd.8,v 1.312 2020/01/25 06:03:10 djm Exp $
.Dd $Mdocdate: December 21 2019 $ .Dd $Mdocdate: January 25 2020 $
.Dt SSHD 8 .Dt SSHD 8
.Os .Os
.Sh NAME .Sh NAME
@ -600,8 +600,8 @@ IPv6 addresses can be specified by enclosing the address in square brackets.
Multiple Multiple
.Cm permitopen .Cm permitopen
options may be applied separated by commas. options may be applied separated by commas.
No pattern matching is performed on the specified hostnames, No pattern matching or name lookup is performed on the
they must be literal domains or addresses. specified hostnames, they must be literal host names and/or addresses.
A port specification of A port specification of
.Cm * .Cm *
matches any port. matches any port.

View File

@ -33,8 +33,8 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: sshd_config.5,v 1.298 2020/01/21 06:09:56 dtucker Exp $ .\" $OpenBSD: sshd_config.5,v 1.299 2020/01/25 06:03:11 djm Exp $
.Dd $Mdocdate: January 21 2020 $ .Dd $Mdocdate: January 25 2020 $
.Dt SSHD_CONFIG 5 .Dt SSHD_CONFIG 5
.Os .Os
.Sh NAME .Sh NAME
@ -1299,7 +1299,9 @@ An argument of
can be used to prohibit all forwarding requests. can be used to prohibit all forwarding requests.
The wildcard The wildcard
.Sq * .Sq *
can be used for host or port to allow all hosts or ports, respectively. can be used for host or port to allow all hosts or ports respectively.
Otherwise, no pattern matching or address lookups are performed on supplied
names.
By default all port forwarding requests are permitted. By default all port forwarding requests are permitted.
.It Cm PermitRootLogin .It Cm PermitRootLogin
Specifies whether root can log in using Specifies whether root can log in using