[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#289403: openssh: ssh documentation: No docs on -- flag.



Package: openssh
Severity: minor


The -- flag is not documented in the ssh man page or
in the 'usage:' information that is printed by ssh.
It actually does work as one would expect.

This is mildly important, because if anyone were to write a
shell script that executed

ssh "$host" ls

and the host name was set to some flag (like -2),
then ssh would unexpectedly try to connect to
a host named "ls".

It might be possible to create some sort of a security
breach this way, though it would take a good bit
of ingenuity.

scp -- "$host" ls

cleanly  removes the possibility of trouble from hostnames beginning
with hyphens.   It should be encouraged.


-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)




Reply to: