diff options
| author | djm@openbsd.org <djm@openbsd.org> | 2016-11-30 02:57:40 +0000 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2016-11-30 19:44:01 +1100 |
| commit | fd6dcef2030d23c43f986d26979f84619c10589d (patch) | |
| tree | a9b9d64866a656d5e187f7d63b61e1c1bede5e8f /deattack.h | |
| parent | 7fc4766ac78abae81ee75b22b7550720bfa28a33 (diff) | |
upstream commit
When a forced-command appears in both a certificate and
an authorized keys/principals command= restriction, refuse to accept the
certificate unless they are identical.
The previous (documented) behaviour of having the certificate forced-
command override the other could be a bit confused and more error-prone.
Pointed out by Jann Horn of Project Zero; ok dtucker@
Upstream-ID: 79d811b6eb6bbe1221bf146dde6928f92d2cd05f
Diffstat (limited to 'deattack.h')
0 files changed, 0 insertions, 0 deletions