- djm@cvs.openbsd.org 2009/11/10 02:58:56

[sshd_config.5]
     clarify that StrictModes does not apply to ChrootDirectory. Permissions
     and ownership are always checked when chrooting. bz#1532
This commit is contained in:
Darren Tucker 2010-01-08 17:06:47 +11:00
parent 78be8c54d6
commit f788a91624
2 changed files with 9 additions and 2 deletions

View File

@ -43,6 +43,10 @@
[ssh_config.5] [ssh_config.5]
explain the constraints on LocalCommand some more so people don't explain the constraints on LocalCommand some more so people don't
try to abuse it. try to abuse it.
- djm@cvs.openbsd.org 2009/11/10 02:58:56
[sshd_config.5]
clarify that StrictModes does not apply to ChrootDirectory. Permissions
and ownership are always checked when chrooting. bz#1532
20091226 20091226
- (tim) [contrib/cygwin/Makefile] Install ssh-copy-id and ssh-copy-id.1 - (tim) [contrib/cygwin/Makefile] Install ssh-copy-id and ssh-copy-id.1

View File

@ -34,8 +34,8 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: sshd_config.5,v 1.111 2009/10/28 21:45:08 jmc Exp $ .\" $OpenBSD: sshd_config.5,v 1.112 2009/11/10 02:58:56 djm Exp $
.Dd $Mdocdate: October 28 2009 $ .Dd $Mdocdate: November 10 2009 $
.Dt SSHD_CONFIG 5 .Dt SSHD_CONFIG 5
.Os .Os
.Sh NAME .Sh NAME
@ -832,6 +832,9 @@ This is normally desirable because novices sometimes accidentally leave their
directory or files world-writable. directory or files world-writable.
The default is The default is
.Dq yes . .Dq yes .
Note that this does not apply to
.Cm ChrootDirectory ,
whose permissions and ownership are checked unconditionally.
.It Cm Subsystem .It Cm Subsystem
Configures an external subsystem (e.g. file transfer daemon). Configures an external subsystem (e.g. file transfer daemon).
Arguments should be a subsystem name and a command (with optional arguments) Arguments should be a subsystem name and a command (with optional arguments)