[sshd_config.5]
     clarify we cd to user's home after chroot; ok markus@ on
     earlier version; tweaks and ok jmc@
This commit is contained in:
Darren Tucker 2009-06-21 17:56:51 +10:00
parent f92077f05c
commit 51dbe503bf
2 changed files with 9 additions and 2 deletions

View File

@ -47,6 +47,10 @@
- jmc@cvs.openbsd.org 2009/04/18 18:39:10 - jmc@cvs.openbsd.org 2009/04/18 18:39:10
[sshd_config.5] [sshd_config.5]
tweak previous; ok stevesk tweak previous; ok stevesk
- stevesk@cvs.openbsd.org 2009/04/21 15:13:17
[sshd_config.5]
clarify we cd to user's home after chroot; ok markus@ on
earlier version; tweaks and ok jmc@
20090616 20090616
- (dtucker) [configure.ac defines.h] Bug #1607: handle the case where fsid_t - (dtucker) [configure.ac defines.h] Bug #1607: handle the case where fsid_t

View File

@ -34,8 +34,8 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: sshd_config.5,v 1.105 2009/04/18 18:39:10 jmc Exp $ .\" $OpenBSD: sshd_config.5,v 1.106 2009/04/21 15:13:17 stevesk Exp $
.Dd $Mdocdate: April 18 2009 $ .Dd $Mdocdate: April 21 2009 $
.Dt SSHD_CONFIG 5 .Dt SSHD_CONFIG 5
.Os .Os
.Sh NAME .Sh NAME
@ -188,6 +188,9 @@ Specifies a path to
to after authentication. to after authentication.
This path, and all its components, must be root-owned directories that are This path, and all its components, must be root-owned directories that are
not writable by any other user or group. not writable by any other user or group.
After the chroot,
.Xr sshd 8
changes the working directory to the user's home directory.
.Pp .Pp
The path may contain the following tokens that are expanded at runtime once The path may contain the following tokens that are expanded at runtime once
the connecting user has been authenticated: %% is replaced by a literal '%', the connecting user has been authenticated: %% is replaced by a literal '%',