diff options
Diffstat (limited to 'ssh-keygen.1')
-rw-r--r-- | ssh-keygen.1 | 30 |
1 files changed, 15 insertions, 15 deletions
diff --git a/ssh-keygen.1 b/ssh-keygen.1 index 6557f9336..c819320db 100644 --- a/ssh-keygen.1 +++ b/ssh-keygen.1 | |||
@@ -1,4 +1,4 @@ | |||
1 | .\" $OpenBSD: ssh-keygen.1,v 1.88 2010/03/08 00:28:55 djm Exp $ | 1 | .\" $OpenBSD: ssh-keygen.1,v 1.89 2010/03/08 09:41:27 jmc Exp $ |
2 | .\" | 2 | .\" |
3 | .\" -*- nroff -*- | 3 | .\" -*- nroff -*- |
4 | .\" | 4 | .\" |
@@ -307,8 +307,15 @@ Please see the | |||
307 | section for details. | 307 | section for details. |
308 | The constraints that are valid for user certificates are: | 308 | The constraints that are valid for user certificates are: |
309 | .Bl -tag -width Ds | 309 | .Bl -tag -width Ds |
310 | .It Ic no-x11-forwarding | 310 | .It Ic clear |
311 | Disable X11 forwarding (permitted by default). | 311 | Clear all enabled permissions. |
312 | This is useful for clearing the default set of permissions so permissions may | ||
313 | be added individually. | ||
314 | .It Ic force-command Ns = Ns Ar command | ||
315 | Forces the execution of | ||
316 | .Ar command | ||
317 | instead of any shell or command specified by the user when | ||
318 | the certificate is used for authentication. | ||
312 | .It Ic no-agent-forwarding | 319 | .It Ic no-agent-forwarding |
313 | Disable | 320 | Disable |
314 | .Xr ssh-agent 1 | 321 | .Xr ssh-agent 1 |
@@ -323,12 +330,8 @@ Disable execution of | |||
323 | by | 330 | by |
324 | .Xr sshd 8 | 331 | .Xr sshd 8 |
325 | (permitted by default). | 332 | (permitted by default). |
326 | .It Ic clear | 333 | .It Ic no-x11-forwarding |
327 | Clear all enabled permissions. | 334 | Disable X11 forwarding (permitted by default). |
328 | This is useful for clearing the default set of permissions so permissions may | ||
329 | be added individually. | ||
330 | .It Ic permit-x11-forwarding | ||
331 | Allows X11 forwarding. | ||
332 | .It Ic permit-agent-forwarding | 335 | .It Ic permit-agent-forwarding |
333 | Allows | 336 | Allows |
334 | .Xr ssh-agent 1 | 337 | .Xr ssh-agent 1 |
@@ -342,12 +345,9 @@ Allows execution of | |||
342 | .Pa ~/.ssh/rc | 345 | .Pa ~/.ssh/rc |
343 | by | 346 | by |
344 | .Xr sshd 8 . | 347 | .Xr sshd 8 . |
345 | .It Ic force-command=command | 348 | .It Ic permit-x11-forwarding |
346 | Forces the execution of | 349 | Allows X11 forwarding. |
347 | .Ar command | 350 | .It Ic source-address Ns = Ns Ar address_list |
348 | instead of any shell or command specified by the user when | ||
349 | the certificate is used for authentication. | ||
350 | .It Ic source-address=address_list | ||
351 | Restrict the source addresses from which the certificate is considered valid | 351 | Restrict the source addresses from which the certificate is considered valid |
352 | from. | 352 | from. |
353 | The | 353 | The |