CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2009/08/27 11:44:52
Modified files:
usr.bin/ssh : authfd.c authfd.h ssh-add.c
Log message:
Do not fall back to adding keys without contraints (ssh-add -c / -t ...)
when the agent refuses the constrained add request. This was a useful
migration measure back in 2002 when constraints were new, but just
adds risk now.
bz #1612, report and patch from dkg AT fifthhorseman.net; ok markus@
