summaryrefslogtreecommitdiffstats
path: root/auth-options.h
diff options
context:
space:
mode:
authordjm@openbsd.org <djm@openbsd.org>2019-07-09 06:15:00 +0200
committerDamien Miller <djm@mindrot.org>2019-07-09 06:20:15 +0200
commit5b2b79ff7c057ee101518545727ed3023372891d (patch)
tree73b104b883b87dbd00954199a16c1238d2a71299 /auth-options.h
parentMove log.h include inside ifdefs. (diff)
downloadopenssh-5b2b79ff7c057ee101518545727ed3023372891d.tar.xz
openssh-5b2b79ff7c057ee101518545727ed3023372891d.zip
upstream: cap the number of permiopen/permitlisten directives we're
willing to parse on a single authorized_keys line; ok deraadt@ OpenBSD-Commit-ID: a43a752c2555d26aa3fc754805a476f6e3e30f46
Diffstat (limited to 'auth-options.h')
-rw-r--r--auth-options.h5
1 files changed, 4 insertions, 1 deletions
diff --git a/auth-options.h b/auth-options.h
index 0462983b5..14cbfa49d 100644
--- a/auth-options.h
+++ b/auth-options.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth-options.h,v 1.27 2018/06/06 18:23:32 djm Exp $ */
+/* $OpenBSD: auth-options.h,v 1.28 2019/07/09 04:15:00 djm Exp $ */
/*
* Copyright (c) 2018 Damien Miller <djm@mindrot.org>
@@ -22,6 +22,9 @@
struct passwd;
struct sshkey;
+/* Maximum number of permitopen/permitlisten directives to accept */
+#define SSH_AUTHOPT_PERMIT_MAX 4096
+
/*
* sshauthopt represents key options parsed from authorized_keys or
* from certificate extensions/options.