=================================================================== RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/ssh/ssh-keysign.8,v retrieving revision 1.2.4.2 retrieving revision 1.2.4.3 diff -u -r1.2.4.2 -r1.2.4.3 --- src/usr.bin/ssh/ssh-keysign.8 2002/10/11 14:51:53 1.2.4.2 +++ src/usr.bin/ssh/ssh-keysign.8 2003/04/03 22:35:18 1.2.4.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: ssh-keysign.8,v 1.2.4.2 2002/10/11 14:51:53 miod Exp $ +.\" $OpenBSD: ssh-keysign.8,v 1.2.4.3 2003/04/03 22:35:18 miod Exp $ .\" .\" Copyright (c) 2002 Markus Friedl. All rights reserved. .\" @@ -39,10 +39,10 @@ .Pp .Nm is disabled by default and can only be enabled in the -the global client configuration file +global client configuration file .Pa /etc/ssh/ssh_config by setting -.Cm HostbasedAuthentication +.Cm EnableSSHKeysign to .Dq yes . .Pp @@ -62,8 +62,8 @@ is enabled. .It Pa /etc/ssh/ssh_host_dsa_key, /etc/ssh/ssh_host_rsa_key These files contain the private parts of the host keys used to -generate the digital signature. They -should be owned by root, readable only by root, and not +generate the digital signature. +They should be owned by root, readable only by root, and not accessible to others. Since they are readable only by root, .Nm