jonathan/openssh
1
0
Fork 0
forked from rpms/openssh
Code Pull Requests Activity

fixup! OpenSSH 8.7p1 patches rebase

Browse Source
This commit is contained in:
Dmitry Belyavskiy 2021-09-16 16:13:20 +02:00
parent 640f2450c4
commit 72aea69dd8
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
openssh-8.7p1-scp-kill-switch.patch
View File

@ -5,7 +5,7 @@ diff -up openssh-8.7p1/pathnames.h.kill-scp openssh-8.7p1/pathnames.h
#define _PATH_HOST_XMSS_KEY_FILE SSHDIR "/ssh_host_xmss_key" #define _PATH_HOST_XMSS_KEY_FILE SSHDIR "/ssh_host_xmss_key"
#define _PATH_HOST_RSA_KEY_FILE SSHDIR "/ssh_host_rsa_key" #define _PATH_HOST_RSA_KEY_FILE SSHDIR "/ssh_host_rsa_key"
#define _PATH_DH_MODULI SSHDIR "/moduli" #define _PATH_DH_MODULI SSHDIR "/moduli"
+#define _PATH_SCP_KILL_SWITCH SSHDIR "/scp_kill_switch" +#define _PATH_SCP_KILL_SWITCH SSHDIR "/disable_scp"
#ifndef _PATH_SSH_PROGRAM #ifndef _PATH_SSH_PROGRAM
#define _PATH_SSH_PROGRAM "/usr/bin/ssh" #define _PATH_SSH_PROGRAM "/usr/bin/ssh"
@ -18,7 +18,7 @@ diff -up openssh-8.7p1/scp.1.kill-scp openssh-8.7p1/scp.1
.El .El
+.Pp +.Pp
+Usage of SCP protocol can be blocked by creating a world-readable +Usage of SCP protocol can be blocked by creating a world-readable
+.Ar /etc/ssh/scp_kill_switch +.Ar /etc/ssh/disable_scp
+file. If this file exists, when SCP protocol is in use (either remotely or +file. If this file exists, when SCP protocol is in use (either remotely or
+via the +via the
+.Fl O +.Fl O