summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/serverloop.c
diff options
context:
space:
mode:
authormarkus <markus@openbsd.org>2000-06-18 04:05:01 +0000
committermarkus <markus@openbsd.org>2000-06-18 04:05:01 +0000
commit9609d75bbe91a066432eba170adc789d0e7dc733 (patch)
treea46bb66a3b44f4a9d031bbe7d948b09444202a20 /usr.bin/ssh/serverloop.c
parentindent (diff)
downloadwireguard-openbsd-9609d75bbe91a066432eba170adc789d0e7dc733.tar.xz
wireguard-openbsd-9609d75bbe91a066432eba170adc789d0e7dc733.zip
split auth-rsa option parsing into auth-options
add options support to authorized_keys2
Diffstat (limited to 'usr.bin/ssh/serverloop.c')
-rw-r--r--usr.bin/ssh/serverloop.c7
1 files changed, 7 insertions, 0 deletions
diff --git a/usr.bin/ssh/serverloop.c b/usr.bin/ssh/serverloop.c
index 74a800b9d96..46ac69a5ca7 100644
--- a/usr.bin/ssh/serverloop.c
+++ b/usr.bin/ssh/serverloop.c
@@ -23,6 +23,7 @@
#include "ssh2.h"
#include "session.h"
#include "dispatch.h"
+#include "auth-options.h"
static Buffer stdin_buffer; /* Buffer for stdin data. */
static Buffer stdout_buffer; /* Buffer for stdout data. */
@@ -706,7 +707,13 @@ input_direct_tcpip(void)
debug("open direct-tcpip: from %s port %d to %s port %d",
originator, originator_port, target, target_port);
+
/* XXX check permission */
+ if (! no_port_forwarding_flag) {
+ xfree(target);
+ xfree(originator);
+ return -1;
+ }
sock = channel_connect_to(target, target_port);
xfree(target);
xfree(originator);