summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--ChangeLog8
-rw-r--r--ssh.133
-rw-r--r--ssh_config.520
-rw-r--r--sshd.87
4 files changed, 21 insertions, 47 deletions
diff --git a/ChangeLog b/ChangeLog
index fcf85fae1..eadbb9a79 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,11 @@
120100905
2 - OpenBSD CVS Sync
3 - djm@cvs.openbsd.org 2010/08/04 05:37:01
4 [ssh.1 ssh_config.5 sshd.8]
5 Remove mentions of weird "addr/port" alternate address format for IPv6
6 addresses combinations. It hasn't worked for ages and we have supported
7 the more commen "[addr]:port" format for a long time. ok jmc@ markus@
8
120100903 920100903
2 - (dtucker) [monitor.c] Bug #1795: Initialize the values to be returned from 10 - (dtucker) [monitor.c] Bug #1795: Initialize the values to be returned from
3 PAM to sane values in case the PAM method doesn't write to them. Spotted by 11 PAM to sane values in case the PAM method doesn't write to them. Spotted by
diff --git a/ssh.1 b/ssh.1
index d8b3775da..02d28a00b 100644
--- a/ssh.1
+++ b/ssh.1
@@ -34,8 +34,8 @@
34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36.\" 36.\"
37.\" $OpenBSD: ssh.1,v 1.307 2010/07/23 08:49:25 dtucker Exp $ 37.\" $OpenBSD: ssh.1,v 1.308 2010/08/04 05:37:01 djm Exp $
38.Dd $Mdocdate: July 23 2010 $ 38.Dd $Mdocdate: August 4 2010 $
39.Dt SSH 1 39.Dt SSH 1
40.Os 40.Os
41.Sh NAME 41.Sh NAME
@@ -202,14 +202,7 @@ will act as a SOCKS server.
202Only root can forward privileged ports. 202Only root can forward privileged ports.
203Dynamic port forwardings can also be specified in the configuration file. 203Dynamic port forwardings can also be specified in the configuration file.
204.Pp 204.Pp
205IPv6 addresses can be specified with an alternative syntax: 205IPv6 addresses can be specified by enclosing the address in square brackets.
206.Sm off
207.Xo
208.Op Ar bind_address No /
209.Ar port
210.Xc
211.Sm on
212or by enclosing the address in square brackets.
213Only the superuser can forward privileged ports. 206Only the superuser can forward privileged ports.
214By default, the local port is bound in accordance with the 207By default, the local port is bound in accordance with the
215.Cm GatewayPorts 208.Cm GatewayPorts
@@ -320,15 +313,7 @@ port
320.Ar hostport 313.Ar hostport
321from the remote machine. 314from the remote machine.
322Port forwardings can also be specified in the configuration file. 315Port forwardings can also be specified in the configuration file.
323IPv6 addresses can be specified with an alternative syntax: 316IPv6 addresses can be specified by enclosing the address in square brackets.
324.Sm off
325.Xo
326.Op Ar bind_address No /
327.Ar port No / Ar host No /
328.Ar hostport
329.Xc
330.Sm on
331or by enclosing the address in square brackets.
332Only the superuser can forward privileged ports. 317Only the superuser can forward privileged ports.
333By default, the local port is bound in accordance with the 318By default, the local port is bound in accordance with the
334.Cm GatewayPorts 319.Cm GatewayPorts
@@ -511,15 +496,7 @@ from the local machine.
511Port forwardings can also be specified in the configuration file. 496Port forwardings can also be specified in the configuration file.
512Privileged ports can be forwarded only when 497Privileged ports can be forwarded only when
513logging in as root on the remote machine. 498logging in as root on the remote machine.
514IPv6 addresses can be specified by enclosing the address in square braces or 499IPv6 addresses can be specified by enclosing the address in square braces.
515using an alternative syntax:
516.Sm off
517.Xo
518.Op Ar bind_address No /
519.Ar host No / Ar port No /
520.Ar hostport
521.Xc .
522.Sm on
523.Pp 500.Pp
524By default, the listening socket on the server will be bound to the loopback 501By default, the listening socket on the server will be bound to the loopback
525interface only. 502interface only.
diff --git a/ssh_config.5 b/ssh_config.5
index 04df8184c..ddb806ec0 100644
--- a/ssh_config.5
+++ b/ssh_config.5
@@ -34,8 +34,8 @@
34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36.\" 36.\"
37.\" $OpenBSD: ssh_config.5,v 1.137 2010/07/19 09:15:12 djm Exp $ 37.\" $OpenBSD: ssh_config.5,v 1.138 2010/08/04 05:37:01 djm Exp $
38.Dd $Mdocdate: July 19 2010 $ 38.Dd $Mdocdate: August 4 2010 $
39.Dt SSH_CONFIG 5 39.Dt SSH_CONFIG 5
40.Os 40.Os
41.Sh NAME 41.Sh NAME
@@ -351,9 +351,7 @@ The argument must be
351.Sm off 351.Sm off
352.Oo Ar bind_address : Oc Ar port . 352.Oo Ar bind_address : Oc Ar port .
353.Sm on 353.Sm on
354IPv6 addresses can be specified by enclosing addresses in square brackets or 354IPv6 addresses can be specified by enclosing addresses in square brackets.
355by using an alternative syntax:
356.Oo Ar bind_address Ns / Oc Ns Ar port .
357By default, the local port is bound in accordance with the 355By default, the local port is bound in accordance with the
358.Cm GatewayPorts 356.Cm GatewayPorts
359setting. 357setting.
@@ -678,11 +676,7 @@ The first argument must be
678.Sm on 676.Sm on
679and the second argument must be 677and the second argument must be
680.Ar host : Ns Ar hostport . 678.Ar host : Ns Ar hostport .
681IPv6 addresses can be specified by enclosing addresses in square brackets or 679IPv6 addresses can be specified by enclosing addresses in square brackets.
682by using an alternative syntax:
683.Oo Ar bind_address Ns / Oc Ns Ar port
684and
685.Ar host Ns / Ns Ar hostport .
686Multiple forwardings may be specified, and additional forwardings can be 680Multiple forwardings may be specified, and additional forwardings can be
687given on the command line. 681given on the command line.
688Only the superuser can forward privileged ports. 682Only the superuser can forward privileged ports.
@@ -862,11 +856,7 @@ The first argument must be
862.Sm on 856.Sm on
863and the second argument must be 857and the second argument must be
864.Ar host : Ns Ar hostport . 858.Ar host : Ns Ar hostport .
865IPv6 addresses can be specified by enclosing addresses in square brackets 859IPv6 addresses can be specified by enclosing addresses in square brackets.
866or by using an alternative syntax:
867.Oo Ar bind_address Ns / Oc Ns Ar port
868and
869.Ar host Ns / Ns Ar hostport .
870Multiple forwardings may be specified, and additional 860Multiple forwardings may be specified, and additional
871forwardings can be given on the command line. 861forwardings can be given on the command line.
872Privileged ports can be forwarded only when 862Privileged ports can be forwarded only when
diff --git a/sshd.8 b/sshd.8
index 6eb49238a..d3685b92b 100644
--- a/sshd.8
+++ b/sshd.8
@@ -34,8 +34,8 @@
34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36.\" 36.\"
37.\" $OpenBSD: sshd.8,v 1.256 2010/05/07 11:30:30 djm Exp $ 37.\" $OpenBSD: sshd.8,v 1.257 2010/08/04 05:37:01 djm Exp $
38.Dd $Mdocdate: May 7 2010 $ 38.Dd $Mdocdate: August 4 2010 $
39.Dt SSHD 8 39.Dt SSHD 8
40.Os 40.Os
41.Sh NAME 41.Sh NAME
@@ -595,8 +595,7 @@ Limit local
595.Li ``ssh -L'' 595.Li ``ssh -L''
596port forwarding such that it may only connect to the specified host and 596port forwarding such that it may only connect to the specified host and
597port. 597port.
598IPv6 addresses can be specified with an alternative syntax: 598IPv6 addresses can be specified by enclosing the address in square brackets.
599.Ar host Ns / Ns Ar port .
600Multiple 599Multiple
601.Cm permitopen 600.Cm permitopen
602options may be applied separated by commas. 601options may be applied separated by commas.