Check for blacklists in /usr/share/ssh/ as well as /etc/ssh/ (see

#481283).

1 files changed, 5 insertions, 1 deletions

diff --git a/ssh-vulnkey.1 b/ssh-vulnkey.1
index 73570fcad..c0a7592f8 100644
--- a/ssh-vulnkey.1
+++ b/ssh-vulnkey.1
@@ -163,7 +163,7 @@ If present, contains the protocol version 2 RSA identity of the system.
 If present, contains the protocol version 2 DSA identity of the system.
 .It Pa /etc/ssh/ssh_host_key
 If present, contains the protocol version 1 RSA identity of the system.
-.It Pa /etc/ssh/blacklist. Ns Ar TYPE Ns Pa - Ns Ar LENGTH
+.It Pa /usr/share/ssh/blacklist. Ns Ar TYPE Ns Pa - Ns Ar LENGTH
 If present, lists the blacklisted keys of type
 .Ar TYPE
 .Pf ( Dq RSA
@@ -175,6 +175,10 @@ The format of this file is described above.
 RSA1 keys are converted to RSA before being checked in the blacklist.
 Note that the fingerprints of RSA1 keys are computed differently, so you
 will not be able to find them in the blacklist by hand.
+.It Pa /etc/ssh/blacklist. Ns Ar TYPE Ns Pa - Ns Ar LENGTH
+Same as
+.Pa /usr/share/ssh/blacklist. Ns Ar TYPE Ns Pa - Ns Ar LENGTH ,
+but may be edited by the system administrator to add new blacklist entries.
 .El
 .Sh SEE ALSO
 .Xr ssh-keygen 1 ,