summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--ChangeLog4
-rw-r--r--sshd_config.57
2 files changed, 9 insertions, 2 deletions
diff --git a/ChangeLog b/ChangeLog
index dcc9932db..f2e6e8ccb 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -47,6 +47,10 @@
47 - jmc@cvs.openbsd.org 2009/04/18 18:39:10 47 - jmc@cvs.openbsd.org 2009/04/18 18:39:10
48 [sshd_config.5] 48 [sshd_config.5]
49 tweak previous; ok stevesk 49 tweak previous; ok stevesk
50 - stevesk@cvs.openbsd.org 2009/04/21 15:13:17
51 [sshd_config.5]
52 clarify we cd to user's home after chroot; ok markus@ on
53 earlier version; tweaks and ok jmc@
50 54
5120090616 5520090616
52 - (dtucker) [configure.ac defines.h] Bug #1607: handle the case where fsid_t 56 - (dtucker) [configure.ac defines.h] Bug #1607: handle the case where fsid_t
diff --git a/sshd_config.5 b/sshd_config.5
index 916e019da..29f4d8240 100644
--- a/sshd_config.5
+++ b/sshd_config.5
@@ -34,8 +34,8 @@
34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36.\" 36.\"
37.\" $OpenBSD: sshd_config.5,v 1.105 2009/04/18 18:39:10 jmc Exp $ 37.\" $OpenBSD: sshd_config.5,v 1.106 2009/04/21 15:13:17 stevesk Exp $
38.Dd $Mdocdate: April 18 2009 $ 38.Dd $Mdocdate: April 21 2009 $
39.Dt SSHD_CONFIG 5 39.Dt SSHD_CONFIG 5
40.Os 40.Os
41.Sh NAME 41.Sh NAME
@@ -188,6 +188,9 @@ Specifies a path to
188to after authentication. 188to after authentication.
189This path, and all its components, must be root-owned directories that are 189This path, and all its components, must be root-owned directories that are
190not writable by any other user or group. 190not writable by any other user or group.
191After the chroot,
192.Xr sshd 8
193changes the working directory to the user's home directory.
191.Pp 194.Pp
192The path may contain the following tokens that are expanded at runtime once 195The path may contain the following tokens that are expanded at runtime once
193the connecting user has been authenticated: %% is replaced by a literal '%', 196the connecting user has been authenticated: %% is replaced by a literal '%',