From 0df2e6b41de8b35845aa2f297ef8d39b85ba3d47 Mon Sep 17 00:00:00 2001 From: Colin Watson Date: Sun, 6 Apr 2008 11:14:35 +0000 Subject: Backport from 4.9p1: - Ignore ~/.ssh/rc if a sshd_config ForcedCommand is specified (see http://www.securityfocus.com/bid/28531/info). - Add no-user-rc authorized_keys option to disable execution of ~/.ssh/rc. --- sshd_config.5 | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'sshd_config.5') diff --git a/sshd_config.5 b/sshd_config.5 index fab43af42..a7a7227b2 100644 --- a/sshd_config.5 +++ b/sshd_config.5 @@ -311,7 +311,9 @@ for more information on patterns. .It Cm ForceCommand Forces the execution of the command specified by .Cm ForceCommand , -ignoring any command supplied by the client. +ignoring any command supplied by the client and +.Pa ~/.ssh/rc +if present. The command is invoked by using the user's login shell with the -c option. This applies to shell, command, or subsystem execution. It is most useful inside a -- cgit v1.2.3