summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--ChangeLog6
-rw-r--r--ssh-add.16
-rw-r--r--ssh-agent.115
-rw-r--r--ssh.16
4 files changed, 19 insertions, 14 deletions
diff --git a/ChangeLog b/ChangeLog
index ef05cbe35..34351d474 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -10,6 +10,12 @@
10 [ssh.1 ssh-agent.1 ssh-add.1] 10 [ssh.1 ssh-agent.1 ssh-add.1]
11 use the UNIX-related macros (.At and .Ux) where appropriate. 11 use the UNIX-related macros (.At and .Ux) where appropriate.
12 ok jmc@ 12 ok jmc@
13 - sobrado@cvs.openbsd.org 2009/10/22 15:02:12
14 [ssh-agent.1 ssh-add.1 ssh.1]
15 write UNIX-domain in a more consistent way; while here, replace a
16 few remaining ".Tn UNIX" macros with ".Ux" ones.
17 pointed out by ratchov@, thanks!
18 ok jmc@
13 19
1420091011 2020091011
15 - (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for 21 - (dtucker) [configure.ac sftp-client.c] Remove the gyrations required for
diff --git a/ssh-add.1 b/ssh-add.1
index c484e94a0..ee9a00ff0 100644
--- a/ssh-add.1
+++ b/ssh-add.1
@@ -1,4 +1,4 @@
1.\" $OpenBSD: ssh-add.1,v 1.47 2009/10/22 12:35:53 sobrado Exp $ 1.\" $OpenBSD: ssh-add.1,v 1.48 2009/10/22 15:02:12 sobrado Exp $
2.\" 2.\"
3.\" -*- nroff -*- 3.\" -*- nroff -*-
4.\" 4.\"
@@ -149,8 +149,8 @@ may be necessary to redirect the input from
149to make this work.) 149to make this work.)
150.It Ev SSH_AUTH_SOCK 150.It Ev SSH_AUTH_SOCK
151Identifies the path of a 151Identifies the path of a
152.Ux 152.Ux Ns -domain
153domain socket used to communicate with the agent. 153socket used to communicate with the agent.
154.El 154.El
155.Sh FILES 155.Sh FILES
156.Bl -tag -width Ds 156.Bl -tag -width Ds
diff --git a/ssh-agent.1 b/ssh-agent.1
index bbae4af92..acc115bd4 100644
--- a/ssh-agent.1
+++ b/ssh-agent.1
@@ -1,4 +1,4 @@
1.\" $OpenBSD: ssh-agent.1,v 1.48 2009/10/22 12:35:53 sobrado Exp $ 1.\" $OpenBSD: ssh-agent.1,v 1.49 2009/10/22 15:02:12 sobrado Exp $
2.\" 2.\"
3.\" Author: Tatu Ylonen <ylo@cs.hut.fi> 3.\" Author: Tatu Ylonen <ylo@cs.hut.fi>
4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -68,8 +68,8 @@ The options are as follows:
68.Bl -tag -width Ds 68.Bl -tag -width Ds
69.It Fl a Ar bind_address 69.It Fl a Ar bind_address
70Bind the agent to the 70Bind the agent to the
71.Ux 71.Ux Ns -domain
72domain socket 72socket
73.Ar bind_address . 73.Ar bind_address .
74The default is 74The default is
75.Pa /tmp/ssh-XXXXXXXXXX/agent.\*(Ltppid\*(Gt . 75.Pa /tmp/ssh-XXXXXXXXXX/agent.\*(Ltppid\*(Gt .
@@ -165,8 +165,8 @@ by the agent, and the result will be returned to the requester.
165This way, private keys are not exposed to clients using the agent. 165This way, private keys are not exposed to clients using the agent.
166.Pp 166.Pp
167A 167A
168.Ux 168.Ux Ns -domain
169domain socket is created and the name of this socket is stored in the 169socket is created and the name of this socket is stored in the
170.Ev SSH_AUTH_SOCK 170.Ev SSH_AUTH_SOCK
171environment 171environment
172variable. 172variable.
@@ -189,9 +189,8 @@ Contains the protocol version 2 DSA authentication identity of the user.
189.It Pa ~/.ssh/id_rsa 189.It Pa ~/.ssh/id_rsa
190Contains the protocol version 2 RSA authentication identity of the user. 190Contains the protocol version 2 RSA authentication identity of the user.
191.It Pa /tmp/ssh-XXXXXXXXXX/agent.\*(Ltppid\*(Gt 191.It Pa /tmp/ssh-XXXXXXXXXX/agent.\*(Ltppid\*(Gt
192.Ux 192.Ux Ns -domain
193domain sockets used to contain the connection to the 193sockets used to contain the connection to the authentication agent.
194authentication agent.
195These sockets should only be readable by the owner. 194These sockets should only be readable by the owner.
196The sockets should get automatically removed when the agent exits. 195The sockets should get automatically removed when the agent exits.
197.El 196.El
diff --git a/ssh.1 b/ssh.1
index 9aca407a5..7e7f64e46 100644
--- a/ssh.1
+++ b/ssh.1
@@ -34,7 +34,7 @@
34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36.\" 36.\"
37.\" $OpenBSD: ssh.1,v 1.285 2009/10/22 12:35:53 sobrado Exp $ 37.\" $OpenBSD: ssh.1,v 1.286 2009/10/22 15:02:12 sobrado Exp $
38.Dd $Mdocdate: October 22 2009 $ 38.Dd $Mdocdate: October 22 2009 $
39.Dt SSH 1 39.Dt SSH 1
40.Os 40.Os
@@ -133,8 +133,8 @@ This can also be specified on a per-host basis in a configuration file.
133Agent forwarding should be enabled with caution. 133Agent forwarding should be enabled with caution.
134Users with the ability to bypass file permissions on the remote host 134Users with the ability to bypass file permissions on the remote host
135(for the agent's 135(for the agent's
136.Ux 136.Ux Ns -domain
137domain socket) can access the local agent through the forwarded connection. 137socket) can access the local agent through the forwarded connection.
138An attacker cannot obtain key material from the agent, 138An attacker cannot obtain key material from the agent,
139however they can perform operations on the keys that enable them to 139however they can perform operations on the keys that enable them to
140authenticate using the identities loaded into the agent. 140authenticate using the identities loaded into the agent.