- jmc@cvs.openbsd.org 2013/10/14 14:18:56

[sftp-server.8 sftp-server.c]
     tweak previous;
     ok djm
This commit is contained in:
Damien Miller 2013-10-15 12:07:05 +11:00
parent 61c7de8a94
commit 6efab27109
3 changed files with 21 additions and 16 deletions

View File

@ -25,6 +25,10 @@
- djm@cvs.openbsd.org 2013/10/11 02:53:45 - djm@cvs.openbsd.org 2013/10/11 02:53:45
[sftp-client.h] [sftp-client.h]
obsolete comment obsolete comment
- jmc@cvs.openbsd.org 2013/10/14 14:18:56
[sftp-server.8 sftp-server.c]
tweak previous;
ok djm
20131010 20131010
- (dtucker) OpenBSD CVS Sync - (dtucker) OpenBSD CVS Sync

View File

@ -1,4 +1,4 @@
.\" $OpenBSD: sftp-server.8,v 1.24 2013/10/09 23:42:17 djm Exp $ .\" $OpenBSD: sftp-server.8,v 1.25 2013/10/14 14:18:56 jmc Exp $
.\" .\"
.\" Copyright (c) 2000 Markus Friedl. All rights reserved. .\" Copyright (c) 2000 Markus Friedl. All rights reserved.
.\" .\"
@ -22,7 +22,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.Dd $Mdocdate: October 9 2013 $ .Dd $Mdocdate: October 14 2013 $
.Dt SFTP-SERVER 8 .Dt SFTP-SERVER 8
.Os .Os
.Sh NAME .Sh NAME
@ -35,6 +35,8 @@
.Op Fl d Ar start_directory .Op Fl d Ar start_directory
.Op Fl f Ar log_facility .Op Fl f Ar log_facility
.Op Fl l Ar log_level .Op Fl l Ar log_level
.Op Fl P Ar blacklisted_requests
.Op Fl p Ar whitelisted_requests
.Op Fl u Ar umask .Op Fl u Ar umask
.Ek .Ek
.Nm .Nm
@ -98,35 +100,33 @@ DEBUG and DEBUG1 are equivalent.
DEBUG2 and DEBUG3 each specify higher levels of debugging output. DEBUG2 and DEBUG3 each specify higher levels of debugging output.
The default is ERROR. The default is ERROR.
.It Fl P Ar blacklisted_requests .It Fl P Ar blacklisted_requests
Specify a comma-separated list of sftp protocol requests that are banned by Specify a comma-separated list of SFTP protocol requests that are banned by
the server. the server.
.Nm .Nm
will reply to any blacklisted request with a failure. will reply to any blacklisted request with a failure.
The The
.Fl Q .Fl Q
flag allows querying flag can be used to determine the supported request types.
.Nm
to determine the supported request types.
If both a blacklist and a whitelist are specified, then the blacklist is If both a blacklist and a whitelist are specified, then the blacklist is
applied before the whitelist. applied before the whitelist.
.It Fl p Ar whitelisted_requests .It Fl p Ar whitelisted_requests
Specify a comma-separated list of sftp protocol requests that are permitted Specify a comma-separated list of SFTP protocol requests that are permitted
by the server. by the server.
All request types that are not on the whitelist will be logged and replied All request types that are not on the whitelist will be logged and replied
to with a failure message. to with a failure message.
.Pp .Pp
Care must be taken when using this feature to ensure that requests made Care must be taken when using this feature to ensure that requests made
implicitly by sftp clients are permitted. implicitly by SFTP clients are permitted.
.It Fl Q Ar protocol_feature .It Fl Q Ar protocol_feature
Query protocol features supported by Query protocol features supported by
.Nm . .Nm .
At present the only feature that may be queried is At present the only feature that may be queried is
.Dq requests , .Dq requests ,
that may be used for whitelisting or blacklisting (flags which may be used for black or whitelisting (flags
.Fl p
and
.Fl P .Fl P
respectively.) and
.Fl p
respectively).
.It Fl R .It Fl R
Places this instance of Places this instance of
.Nm .Nm

View File

@ -1,4 +1,4 @@
/* $OpenBSD: sftp-server.c,v 1.99 2013/10/10 00:53:25 djm Exp $ */ /* $OpenBSD: sftp-server.c,v 1.100 2013/10/14 14:18:56 jmc Exp $ */
/* /*
* Copyright (c) 2000-2004 Markus Friedl. All rights reserved. * Copyright (c) 2000-2004 Markus Friedl. All rights reserved.
* *
@ -1392,9 +1392,10 @@ sftp_server_usage(void)
fprintf(stderr, fprintf(stderr,
"usage: %s [-ehR] [-d start_directory] [-f log_facility] " "usage: %s [-ehR] [-d start_directory] [-f log_facility] "
"[-l log_level]\n\t[-p request_whitelist] [-P request_blacklist] " "[-l log_level]\n\t[-P blacklisted_requests] "
"[-Q feature] [-u umask]\n", "[-p whitelisted_requests] [-u umask]\n"
__progname); " %s -Q protocol_feature\n",
__progname, __progname);
exit(1); exit(1);
} }