summaryrefslogtreecommitdiff
path: root/ssh_config.5
diff options
context:
space:
mode:
authordjm@openbsd.org <djm@openbsd.org>2017-10-18 02:49:44 +0000
committerDamien Miller <djm@mindrot.org>2017-10-20 12:01:03 +1100
commit05b69e99570553c8e1eafb895b1fbf1d098d2e14 (patch)
treee69cabb3dd3630dacf443d87ee8b1fbd9c1815fe /ssh_config.5
parenteb80e26a15c10bc65fed8b8cdb476819a713c0fd (diff)
upstream commit
In the description of pattern-lists, clarify negated matches by explicitly stating that a negated match will never yield a positive result, and that at least one positive term in the pattern-list must match. bz#1918 Upstream-ID: 652d2f9d993f158fc5f83cef4a95cd9d95ae6a14
Diffstat (limited to 'ssh_config.5')
-rw-r--r--ssh_config.517
1 files changed, 15 insertions, 2 deletions
diff --git a/ssh_config.5 b/ssh_config.5
index eae42760..01acd428 100644
--- a/ssh_config.5
+++ b/ssh_config.5
@@ -33,8 +33,8 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.\" $OpenBSD: ssh_config.5,v 1.257 2017/10/05 12:56:50 jmc Exp $
-.Dd $Mdocdate: October 5 2017 $
+.\" $OpenBSD: ssh_config.5,v 1.258 2017/10/18 02:49:44 djm Exp $
+.Dd $Mdocdate: October 18 2017 $
.Dt SSH_CONFIG 5
.Os
.Sh NAME
@@ -1674,6 +1674,19 @@ pool,
the following entry (in authorized_keys) could be used:
.Pp
.Dl from=\&"!*.dialup.example.com,*.example.com\&"
+.Pp
+Note that a negated match will never produce a positive result by itself.
+For example, attempting to match
+.Qq host3
+against the following pattern-list will fail:
+.Pp
+.Dl from=\&"!host1,!host2\&"
+.Pp
+The solution here is to include a term that will yield a positive match,
+such as a wildcard:
+.Pp
+.Dl from=\&"!host1,!host2,*\&"
+.Pp
.Sh TOKENS
Arguments to some keywords can make use of tokens,
which are expanded at runtime: