| commit | 03ca0917b7ef389ba35da9d39f62856dca9049f1 | |
| author | dtucker <dtucker> | |
| Tue, 6 Oct 2009 21:47:02 +0000 (6 21:47 +0000) | ||
| committer | dtucker <dtucker> | |
| Tue, 6 Oct 2009 21:47:02 +0000 (6 21:47 +0000) | ||
| tree | a733e78219b6039c784ab9791407eca7048fcd22 | treesnapshot (tar.gz zip) |
| parent | 4d4c6b3d578603c7de3b649d70e6645dc4b622b3 | commitdiff |
- djm@cvs.openbsd.org 2009/08/27 17:44:52
[authfd.c ssh-add.c authfd.h]
Do not fall back to adding keys without contraints (ssh-add -c / -t ...)
when the agent refuses the constrained add request. This was a useful
migration measure back in 2002 when constraints were new, but just
adds risk now.
bz #1612, report and patch from dkg AT fifthhorseman.net; ok markus@
[authfd.c ssh-add.c authfd.h]
Do not fall back to adding keys without contraints (ssh-add -c / -t ...)
when the agent refuses the constrained add request. This was a useful
migration measure back in 2002 when constraints were new, but just
adds risk now.
bz #1612, report and patch from dkg AT fifthhorseman.net; ok markus@
| ChangeLog | diffblobblamehistory | |
| authfd.c | diffblobblamehistory | |
| authfd.h | diffblobblamehistory | |
| ssh-add.c | diffblobblamehistory |