kentpeacock / rpms / openssh

Forked from rpms/openssh 2 years ago
Clone
8f2528
diff -up openssh-7.4p1/ssh-agent.1.pkcs11-whitelist openssh-7.4p1/ssh-agent.1
8f2528
--- openssh-7.4p1/ssh-agent.1.pkcs11-whitelist	2017-01-03 10:41:01.916331710 +0100
8f2528
+++ openssh-7.4p1/ssh-agent.1	2017-01-03 10:40:06.549366029 +0100
8f2528
@@ -129,7 +129,7 @@ that may be added using the
8f2528
 option to
8f2528
 .Xr ssh-add 1 .
8f2528
 The default is to allow loading PKCS#11 libraries from
8f2528
-.Dq /usr/lib/*,/usr/local/lib/* .
8f2528
+.Dq /usr/lib*/*,/usr/local/lib*/* .
8f2528
 PKCS#11 libraries that do not match the whitelist will be refused.
8f2528
 See PATTERNS in
8f2528
 .Xr ssh_config 5
8f2528
diff -up openssh-7.4p1/ssh-agent.c.pkcs11-whitelist openssh-7.4p1/ssh-agent.c
8f2528
--- openssh-7.4p1/ssh-agent.c.pkcs11-whitelist	2017-01-03 10:41:09.324327118 +0100
8f2528
+++ openssh-7.4p1/ssh-agent.c	2017-01-03 10:40:21.212356939 +0100
8f2528
@@ -89,7 +89,7 @@
8f2528
 #endif
8f2528
 
8f2528
 #ifndef DEFAULT_PKCS11_WHITELIST
8f2528
-# define DEFAULT_PKCS11_WHITELIST "/usr/lib/*,/usr/local/lib/*"
8f2528
+# define DEFAULT_PKCS11_WHITELIST "/usr/lib*/*,/usr/local/lib*/*"
8f2528
 #endif
8f2528
 
8f2528
 typedef enum {