mirror of git://anongit.mindrot.org/openssh.git
- jmc@cvs.openbsd.org 2013/10/14 14:18:56
[sftp-server.8 sftp-server.c] tweak previous; ok djm
This commit is contained in:
parent
61c7de8a94
commit
6efab27109
|
@ -25,6 +25,10 @@
|
||||||
- djm@cvs.openbsd.org 2013/10/11 02:53:45
|
- djm@cvs.openbsd.org 2013/10/11 02:53:45
|
||||||
[sftp-client.h]
|
[sftp-client.h]
|
||||||
obsolete comment
|
obsolete comment
|
||||||
|
- jmc@cvs.openbsd.org 2013/10/14 14:18:56
|
||||||
|
[sftp-server.8 sftp-server.c]
|
||||||
|
tweak previous;
|
||||||
|
ok djm
|
||||||
|
|
||||||
20131010
|
20131010
|
||||||
- (dtucker) OpenBSD CVS Sync
|
- (dtucker) OpenBSD CVS Sync
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
.\" $OpenBSD: sftp-server.8,v 1.24 2013/10/09 23:42:17 djm Exp $
|
.\" $OpenBSD: sftp-server.8,v 1.25 2013/10/14 14:18:56 jmc Exp $
|
||||||
.\"
|
.\"
|
||||||
.\" Copyright (c) 2000 Markus Friedl. All rights reserved.
|
.\" Copyright (c) 2000 Markus Friedl. All rights reserved.
|
||||||
.\"
|
.\"
|
||||||
|
@ -22,7 +22,7 @@
|
||||||
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
||||||
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
.\"
|
.\"
|
||||||
.Dd $Mdocdate: October 9 2013 $
|
.Dd $Mdocdate: October 14 2013 $
|
||||||
.Dt SFTP-SERVER 8
|
.Dt SFTP-SERVER 8
|
||||||
.Os
|
.Os
|
||||||
.Sh NAME
|
.Sh NAME
|
||||||
|
@ -35,6 +35,8 @@
|
||||||
.Op Fl d Ar start_directory
|
.Op Fl d Ar start_directory
|
||||||
.Op Fl f Ar log_facility
|
.Op Fl f Ar log_facility
|
||||||
.Op Fl l Ar log_level
|
.Op Fl l Ar log_level
|
||||||
|
.Op Fl P Ar blacklisted_requests
|
||||||
|
.Op Fl p Ar whitelisted_requests
|
||||||
.Op Fl u Ar umask
|
.Op Fl u Ar umask
|
||||||
.Ek
|
.Ek
|
||||||
.Nm
|
.Nm
|
||||||
|
@ -98,35 +100,33 @@ DEBUG and DEBUG1 are equivalent.
|
||||||
DEBUG2 and DEBUG3 each specify higher levels of debugging output.
|
DEBUG2 and DEBUG3 each specify higher levels of debugging output.
|
||||||
The default is ERROR.
|
The default is ERROR.
|
||||||
.It Fl P Ar blacklisted_requests
|
.It Fl P Ar blacklisted_requests
|
||||||
Specify a comma-separated list of sftp protocol requests that are banned by
|
Specify a comma-separated list of SFTP protocol requests that are banned by
|
||||||
the server.
|
the server.
|
||||||
.Nm
|
.Nm
|
||||||
will reply to any blacklisted request with a failure.
|
will reply to any blacklisted request with a failure.
|
||||||
The
|
The
|
||||||
.Fl Q
|
.Fl Q
|
||||||
flag allows querying
|
flag can be used to determine the supported request types.
|
||||||
.Nm
|
|
||||||
to determine the supported request types.
|
|
||||||
If both a blacklist and a whitelist are specified, then the blacklist is
|
If both a blacklist and a whitelist are specified, then the blacklist is
|
||||||
applied before the whitelist.
|
applied before the whitelist.
|
||||||
.It Fl p Ar whitelisted_requests
|
.It Fl p Ar whitelisted_requests
|
||||||
Specify a comma-separated list of sftp protocol requests that are permitted
|
Specify a comma-separated list of SFTP protocol requests that are permitted
|
||||||
by the server.
|
by the server.
|
||||||
All request types that are not on the whitelist will be logged and replied
|
All request types that are not on the whitelist will be logged and replied
|
||||||
to with a failure message.
|
to with a failure message.
|
||||||
.Pp
|
.Pp
|
||||||
Care must be taken when using this feature to ensure that requests made
|
Care must be taken when using this feature to ensure that requests made
|
||||||
implicitly by sftp clients are permitted.
|
implicitly by SFTP clients are permitted.
|
||||||
.It Fl Q Ar protocol_feature
|
.It Fl Q Ar protocol_feature
|
||||||
Query protocol features supported by
|
Query protocol features supported by
|
||||||
.Nm .
|
.Nm .
|
||||||
At present the only feature that may be queried is
|
At present the only feature that may be queried is
|
||||||
.Dq requests ,
|
.Dq requests ,
|
||||||
that may be used for whitelisting or blacklisting (flags
|
which may be used for black or whitelisting (flags
|
||||||
.Fl p
|
|
||||||
and
|
|
||||||
.Fl P
|
.Fl P
|
||||||
respectively.)
|
and
|
||||||
|
.Fl p
|
||||||
|
respectively).
|
||||||
.It Fl R
|
.It Fl R
|
||||||
Places this instance of
|
Places this instance of
|
||||||
.Nm
|
.Nm
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
/* $OpenBSD: sftp-server.c,v 1.99 2013/10/10 00:53:25 djm Exp $ */
|
/* $OpenBSD: sftp-server.c,v 1.100 2013/10/14 14:18:56 jmc Exp $ */
|
||||||
/*
|
/*
|
||||||
* Copyright (c) 2000-2004 Markus Friedl. All rights reserved.
|
* Copyright (c) 2000-2004 Markus Friedl. All rights reserved.
|
||||||
*
|
*
|
||||||
|
@ -1392,9 +1392,10 @@ sftp_server_usage(void)
|
||||||
|
|
||||||
fprintf(stderr,
|
fprintf(stderr,
|
||||||
"usage: %s [-ehR] [-d start_directory] [-f log_facility] "
|
"usage: %s [-ehR] [-d start_directory] [-f log_facility] "
|
||||||
"[-l log_level]\n\t[-p request_whitelist] [-P request_blacklist] "
|
"[-l log_level]\n\t[-P blacklisted_requests] "
|
||||||
"[-Q feature] [-u umask]\n",
|
"[-p whitelisted_requests] [-u umask]\n"
|
||||||
__progname);
|
" %s -Q protocol_feature\n",
|
||||||
|
__progname, __progname);
|
||||||
exit(1);
|
exit(1);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue