src/usr.bin/ssh/sshd.8 - diff

Return to sshd.8 CVS log

Up to [local] / src / usr.bin / ssh

Diff for /src/usr.bin/ssh/sshd.8 between version 1.281 and 1.282

version 1.281, 2015/09/11 03:13:36

version 1.282, 2015/11/16 00:30:02

Line 495

The following option specifications are supported (note

that option keywords are case-insensitive):

.Bl -tag -width Ds

.It Cm agent-forwarding

Enable authentication agent forwarding previously disabled by the

.Cm restrict

option.

.It Cm cert-authority

Specifies that the listed key is a certification authority (CA) that is

trusted to validate signed certificates for user authentication.

Line 589

Line 593

A port specification of

.Cm *

matches any port.

.It Cm port-forwarding

Enable port forwarding previously disabled by the

.Cm restrict

.It Cm principals="principals"

On a

.Cm cert-authority

Line 600

Line 607

signers using the

.Cm cert-authority

option.

.It Cm pty

Permits tty allocation previously disabled by the

.Cm restrict

option.

.It Cm restrict

Enable all restrictions, i.e. disable port, agent and X11 forwarding,

as well as disabling PTY allocation

and execution of

.Pa ~/.ssh/rc .

If any future restriction capabilities are added to authorized_keys files

they will be included in this set.

.It Cm tunnel="n"

Force a

.Xr tun 4

device on the server.

Without this option, the next available device will be used if

the client requests a tunnel.

.It Cm user-rc

Enables execution of

.Pa ~/.ssh/rc

previously disabled by the

.Cm restrict

option.

.It Cm X11-forwarding

Permits X11 forwarding previously disabled by the

.Cm restrict

option.

.El

.Pp

An example authorized_keys file:

Line 620

Line 648

AAAAB5...21S==

tunnel="0",command="sh /etc/netstart tun0" ssh-rsa AAAA...==

jane@example.net

restrict,command="uptime" ssh-rsa AAAA1C8...32Tv==

user@example.net

restrict,pty,command="nethack" ssh-rsa AAAA1f8...IrrC5==

user@example.net

.Ed

.Sh SSH_KNOWN_HOSTS FILE FORMAT

The