diff options
| author | djm@openbsd.org <djm@openbsd.org> | 2018-06-09 03:03:10 +0000 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2018-06-09 13:11:00 +1000 |
| commit | 28013759f09ed3ebf7e8335e83a62936bd7a7f47 (patch) | |
| tree | 11704fdf59dbe3ebfe0151cbe82eb0847e12b420 /sshd_config.5 | |
| parent | 7082bb58a2eb878d23ec674587c742e5e9673c36 (diff) | |
upstream: add a SetEnv directive for sshd_config to allow an
administrator to explicitly specify environment variables set in sessions
started by sshd. These override the default environment and any variables set
by user configuration (PermitUserEnvironment, etc), but not the SSH_*
variables set by sshd itself.
ok markus@
OpenBSD-Commit-ID: b6a96c0001ccd7dd211df6cae9e961c20fd718c0
Diffstat (limited to 'sshd_config.5')
| -rw-r--r-- | sshd_config.5 | 18 |
1 files changed, 17 insertions, 1 deletions
diff --git a/sshd_config.5 b/sshd_config.5 index 395f5f6a..c62a9c8e 100644 --- a/sshd_config.5 +++ b/sshd_config.5 @@ -33,7 +33,7 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: sshd_config.5,v 1.273 2018/06/09 03:01:12 djm Exp $ +.\" $OpenBSD: sshd_config.5,v 1.274 2018/06/09 03:03:10 djm Exp $ .Dd $Mdocdate: June 9 2018 $ .Dt SSHD_CONFIG 5 .Os @@ -1138,6 +1138,7 @@ Available keywords are .Cm RekeyLimit , .Cm RevokedKeys , .Cm RDomain , +.Cm SetEnv , .Cm StreamLocalBindMask , .Cm StreamLocalBindUnlink , .Cm TrustedUserCAKeys , @@ -1445,6 +1446,21 @@ will be bound to this If the routing domain is set to .Cm \&%D , then the domain in which the incoming connection was received will be applied. +.It Cm SetEnv +Specifies one or more environment variables to set in child sessions started +by +.Xr sshd 8 +as +.Dq NAME=VALUE . +The environment value may be quoted (e.g. if it contains whitespace +characters). +Environment variables set by +.Cm SetEnv +override the default environment and any variables specified by the user +via +.Cm AcceptEnv +or +.Cm PermitUserEnvironment . .It Cm StreamLocalBindMask Sets the octal file creation mode mask .Pq umask |