CVS log for src/usr.bin/ssh/ssh-agent.1

Up to [local] / src / usr.bin / ssh

Request diff between arbitrary revisions

Default branch: MAIN
Current tag: OPENBSD_7_3

Revision 1.75.4.1 / (download) - annotate - [select for diffs], Wed Jul 19 14:07:53 2023 UTC (10 months, 2 weeks ago) by bluhm
Branch: OPENBSD_7_3
Changes since 1.75: +21 -3 lines
Diff to previous 1.75 (colored) next main 1.76 (colored)

Disallow remote addition of FIDO/PKCS11 provider libraries to
ssh-agent by default.

The old behaviour of allowing remote clients from loading providers
can be restored using `ssh-agent -O allow-remote-pkcs11`.

Detection of local/remote clients requires a ssh(1) that supports
the `session-bind@openssh.com` extension. Forwarding access to a
ssh-agent socket using non-OpenSSH tools may circumvent this control.

from djm@; ok markus@

terminate process if requested to load a PKCS#11 provider that
isn't a PKCS#11 provider; from / ok markus@
from djm@

this is errata/7.3/010_ssh_agent.patch.sig

Revision 1.75 / (download) - annotate - [select for diffs], Fri Oct 7 06:00:58 2022 UTC (19 months, 4 weeks ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE
Branch point for: OPENBSD_7_3
Changes since 1.74: +7 -6 lines
Diff to previous 1.74 (colored)

ssh-agent.1:
- use Nm not Xr for self-ref
- while here, wrap a long line

ssh-agent.c:
- add -O to usage()

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.