summaryrefslogtreecommitdiff
path: root/sshd_config.0
diff options
context:
space:
mode:
Diffstat (limited to 'sshd_config.0')
-rw-r--r--sshd_config.015
1 files changed, 10 insertions, 5 deletions
diff --git a/sshd_config.0 b/sshd_config.0
index ab0d79be6..e19ca875b 100644
--- a/sshd_config.0
+++ b/sshd_config.0
@@ -81,8 +81,9 @@ DESCRIPTION
81 home directory of the user being authenticated, and %u is 81 home directory of the user being authenticated, and %u is
82 replaced by the username of that user. After expansion, 82 replaced by the username of that user. After expansion,
83 AuthorizedKeysFile is taken to be an absolute path or one 83 AuthorizedKeysFile is taken to be an absolute path or one
84 relative to the user's home directory. The default is 84 relative to the user's home directory. Multiple files may be
85 ``.ssh/authorized_keys''. 85 listed, separated by whitespace. The default is
86 ``.ssh/authorized_keys .ssh/authorized_keys2''.
86 87
87 AuthorizedPrincipalsFile 88 AuthorizedPrincipalsFile
88 Specifies a file that lists principal names that are accepted for 89 Specifies a file that lists principal names that are accepted for
@@ -375,7 +376,9 @@ DESCRIPTION
375 separated. The default is: 376 separated. The default is:
376 377
377 hmac-md5,hmac-sha1,umac-64@openssh.com, 378 hmac-md5,hmac-sha1,umac-64@openssh.com,
378 hmac-ripemd160,hmac-sha1-96,hmac-md5-96 379 hmac-ripemd160,hmac-sha1-96,hmac-md5-96,
380 hmac-sha2-256,hmac-sha256-96,hmac-sha2-512,
381 hmac-sha2-512-96
379 382
380 Match Introduces a conditional block. If all of the criteria on the 383 Match Introduces a conditional block. If all of the criteria on the
381 Match line are satisfied, the keywords on the following lines 384 Match line are satisfied, the keywords on the following lines
@@ -625,7 +628,9 @@ DESCRIPTION
625 that has the privilege of the authenticated user. The goal of 628 that has the privilege of the authenticated user. The goal of
626 privilege separation is to prevent privilege escalation by 629 privilege separation is to prevent privilege escalation by
627 containing any corruption within the unprivileged processes. The 630 containing any corruption within the unprivileged processes. The
628 default is ``yes''. 631 default is ``yes''. If UsePrivilegeSeparation is set to
632 ``sandbox'' then the pre-authentication unprivileged process is
633 subject to additional restrictions.
629 634
630 X11DisplayOffset 635 X11DisplayOffset
631 Specifies the first display number available for sshd(8)'s X11 636 Specifies the first display number available for sshd(8)'s X11
@@ -710,4 +715,4 @@ AUTHORS
710 versions 1.5 and 2.0. Niels Provos and Markus Friedl contributed support 715 versions 1.5 and 2.0. Niels Provos and Markus Friedl contributed support
711 for privilege separation. 716 for privilege separation.
712 717
713OpenBSD 4.9 December 8, 2010 OpenBSD 4.9 718OpenBSD 5.0 August 2, 2011 OpenBSD 5.0