mirror of
https://github.com/PowerShell/openssh-portable.git
synced 2025-07-26 23:34:55 +02:00
- djm@cvs.openbsd.org 2004/04/19 13:02:40
[ssh.1 ssh_config.5] document strict permission checks on ~/.ssh/config; prompted by, with & ok jmc@
This commit is contained in:
parent
57a4476a69
commit
c970cb9052
@ -9,6 +9,10 @@
|
|||||||
perform strict ownership and modes checks for ~/.ssh/config files,
|
perform strict ownership and modes checks for ~/.ssh/config files,
|
||||||
as these can be used to execute arbitrary programs; ok markus@
|
as these can be used to execute arbitrary programs; ok markus@
|
||||||
NB. ssh will now exit when it detects a config with poor permissions
|
NB. ssh will now exit when it detects a config with poor permissions
|
||||||
|
- djm@cvs.openbsd.org 2004/04/19 13:02:40
|
||||||
|
[ssh.1 ssh_config.5]
|
||||||
|
document strict permission checks on ~/.ssh/config; prompted by,
|
||||||
|
with & ok jmc@
|
||||||
- (djm) [openbsd-compat/sys-queue.h] Sync with OpenBSD, needed for above change
|
- (djm) [openbsd-compat/sys-queue.h] Sync with OpenBSD, needed for above change
|
||||||
|
|
||||||
20040419
|
20040419
|
||||||
@ -1014,4 +1018,4 @@
|
|||||||
- (djm) Trim deprecated options from INSTALL. Mention UsePAM
|
- (djm) Trim deprecated options from INSTALL. Mention UsePAM
|
||||||
- (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
|
- (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
|
||||||
|
|
||||||
$Id: ChangeLog,v 1.3324 2004/04/20 10:11:57 djm Exp $
|
$Id: ChangeLog,v 1.3325 2004/04/20 10:12:53 djm Exp $
|
||||||
|
4
ssh.1
4
ssh.1
@ -34,7 +34,7 @@
|
|||||||
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
||||||
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
.\"
|
.\"
|
||||||
.\" $OpenBSD: ssh.1,v 1.182 2004/03/05 10:53:58 markus Exp $
|
.\" $OpenBSD: ssh.1,v 1.183 2004/04/19 13:02:40 djm Exp $
|
||||||
.Dd September 25, 1999
|
.Dd September 25, 1999
|
||||||
.Dt SSH 1
|
.Dt SSH 1
|
||||||
.Os
|
.Os
|
||||||
@ -885,6 +885,8 @@ the convenience of the user.
|
|||||||
This is the per-user configuration file.
|
This is the per-user configuration file.
|
||||||
The file format and configuration options are described in
|
The file format and configuration options are described in
|
||||||
.Xr ssh_config 5 .
|
.Xr ssh_config 5 .
|
||||||
|
Because of the potential for abuse, this file must have strict permissions:
|
||||||
|
read/write for the user, and not accessible by others.
|
||||||
.It Pa $HOME/.ssh/authorized_keys
|
.It Pa $HOME/.ssh/authorized_keys
|
||||||
Lists the public keys (RSA/DSA) that can be used for logging in as this user.
|
Lists the public keys (RSA/DSA) that can be used for logging in as this user.
|
||||||
The format of this file is described in the
|
The format of this file is described in the
|
||||||
|
@ -34,7 +34,7 @@
|
|||||||
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
||||||
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
.\"
|
.\"
|
||||||
.\" $OpenBSD: ssh_config.5,v 1.29 2004/03/05 10:53:58 markus Exp $
|
.\" $OpenBSD: ssh_config.5,v 1.30 2004/04/19 13:02:40 djm Exp $
|
||||||
.Dd September 25, 1999
|
.Dd September 25, 1999
|
||||||
.Dt SSH_CONFIG 5
|
.Dt SSH_CONFIG 5
|
||||||
.Os
|
.Os
|
||||||
@ -729,9 +729,8 @@ The format of this file is described above.
|
|||||||
This file is used by the
|
This file is used by the
|
||||||
.Nm ssh
|
.Nm ssh
|
||||||
client.
|
client.
|
||||||
This file does not usually contain any sensitive information,
|
Because of the potential for abuse, this file must have strict permissions:
|
||||||
but the recommended permissions are read/write for the user, and not
|
read/write for the user, and not accessible by others.
|
||||||
accessible by others.
|
|
||||||
.It Pa /etc/ssh/ssh_config
|
.It Pa /etc/ssh/ssh_config
|
||||||
Systemwide configuration file.
|
Systemwide configuration file.
|
||||||
This file provides defaults for those
|
This file provides defaults for those
|
||||||
|
Loading…
x
Reference in New Issue
Block a user