[ssh-agent.1 ssh-add.1 ssh.1]
     write UNIX-domain in a more consistent way; while here, replace a
     few remaining ".Tn UNIX" macros with ".Ux" ones.
     pointed out by ratchov@, thanks!
     ok jmc@
This commit is contained in:
Darren Tucker 2009-10-24 11:42:44 +11:00
parent ae69e1d010
commit 98c9aec30e
4 changed files with 19 additions and 14 deletions

View File

@ -10,6 +10,12 @@
[ssh.1 ssh-agent.1 ssh-add.1] [ssh.1 ssh-agent.1 ssh-add.1]
use the UNIX-related macros (.At and .Ux) where appropriate. use the UNIX-related macros (.At and .Ux) where appropriate.
ok jmc@ ok jmc@
- sobrado@cvs.openbsd.org 2009/10/22 15:02:12
[ssh-agent.1 ssh-add.1 ssh.1]
write UNIX-domain in a more consistent way; while here, replace a
few remaining ".Tn UNIX" macros with ".Ux" ones.
pointed out by ratchov@, thanks!
ok jmc@
20091011 20091011
- (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for - (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for

View File

@ -1,4 +1,4 @@
.\" $OpenBSD: ssh-add.1,v 1.47 2009/10/22 12:35:53 sobrado Exp $ .\" $OpenBSD: ssh-add.1,v 1.48 2009/10/22 15:02:12 sobrado Exp $
.\" .\"
.\" -*- nroff -*- .\" -*- nroff -*-
.\" .\"
@ -149,8 +149,8 @@ may be necessary to redirect the input from
to make this work.) to make this work.)
.It Ev SSH_AUTH_SOCK .It Ev SSH_AUTH_SOCK
Identifies the path of a Identifies the path of a
.Ux .Ux Ns -domain
domain socket used to communicate with the agent. socket used to communicate with the agent.
.El .El
.Sh FILES .Sh FILES
.Bl -tag -width Ds .Bl -tag -width Ds

View File

@ -1,4 +1,4 @@
.\" $OpenBSD: ssh-agent.1,v 1.48 2009/10/22 12:35:53 sobrado Exp $ .\" $OpenBSD: ssh-agent.1,v 1.49 2009/10/22 15:02:12 sobrado Exp $
.\" .\"
.\" Author: Tatu Ylonen <ylo@cs.hut.fi> .\" Author: Tatu Ylonen <ylo@cs.hut.fi>
.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland .\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@ -68,8 +68,8 @@ The options are as follows:
.Bl -tag -width Ds .Bl -tag -width Ds
.It Fl a Ar bind_address .It Fl a Ar bind_address
Bind the agent to the Bind the agent to the
.Ux .Ux Ns -domain
domain socket socket
.Ar bind_address . .Ar bind_address .
The default is The default is
.Pa /tmp/ssh-XXXXXXXXXX/agent.\*(Ltppid\*(Gt . .Pa /tmp/ssh-XXXXXXXXXX/agent.\*(Ltppid\*(Gt .
@ -165,8 +165,8 @@ by the agent, and the result will be returned to the requester.
This way, private keys are not exposed to clients using the agent. This way, private keys are not exposed to clients using the agent.
.Pp .Pp
A A
.Ux .Ux Ns -domain
domain socket is created and the name of this socket is stored in the socket is created and the name of this socket is stored in the
.Ev SSH_AUTH_SOCK .Ev SSH_AUTH_SOCK
environment environment
variable. variable.
@ -189,9 +189,8 @@ Contains the protocol version 2 DSA authentication identity of the user.
.It Pa ~/.ssh/id_rsa .It Pa ~/.ssh/id_rsa
Contains the protocol version 2 RSA authentication identity of the user. Contains the protocol version 2 RSA authentication identity of the user.
.It Pa /tmp/ssh-XXXXXXXXXX/agent.\*(Ltppid\*(Gt .It Pa /tmp/ssh-XXXXXXXXXX/agent.\*(Ltppid\*(Gt
.Ux .Ux Ns -domain
domain sockets used to contain the connection to the sockets used to contain the connection to the authentication agent.
authentication agent.
These sockets should only be readable by the owner. These sockets should only be readable by the owner.
The sockets should get automatically removed when the agent exits. The sockets should get automatically removed when the agent exits.
.El .El

6
ssh.1
View File

@ -34,7 +34,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: ssh.1,v 1.285 2009/10/22 12:35:53 sobrado Exp $ .\" $OpenBSD: ssh.1,v 1.286 2009/10/22 15:02:12 sobrado Exp $
.Dd $Mdocdate: October 22 2009 $ .Dd $Mdocdate: October 22 2009 $
.Dt SSH 1 .Dt SSH 1
.Os .Os
@ -133,8 +133,8 @@ This can also be specified on a per-host basis in a configuration file.
Agent forwarding should be enabled with caution. Agent forwarding should be enabled with caution.
Users with the ability to bypass file permissions on the remote host Users with the ability to bypass file permissions on the remote host
(for the agent's (for the agent's
.Ux .Ux Ns -domain
domain socket) can access the local agent through the forwarded connection. socket) can access the local agent through the forwarded connection.
An attacker cannot obtain key material from the agent, An attacker cannot obtain key material from the agent,
however they can perform operations on the keys that enable them to however they can perform operations on the keys that enable them to
authenticate using the identities loaded into the agent. authenticate using the identities loaded into the agent.