CentOS - Oct 2009 - authorized_keys command=""

Hello,

as I have read manual, if I use in file authorized_keys option
command="" with some command, no other commands will be permitted. I
have tried it, created authorized_keys2 for root and added there
command="rdiff-backup --server" and after that tried to login. Thit
command was executed, but I was normally able to supply other comand
as root. Can you tell me why?

Thank you
Martin

On Sat, 31 Oct 2009, happymaster23 wrote:
> as I have read manual, if I use in file authorized_keys option
> command="" with some command, no other commands will be
permitted. I
> have tried it, created authorized_keys2 for root and added there
> command="rdiff-backup --server" and after that tried to login.
Thit
> command was executed, but I was normally able to supply other comand
> as root. Can you tell me why?
One assumes:  man sshd in the section on the topic at: 
AUTHORIZED_KEYS FILE FORMAT.  I suspect you either are not 
running CentOS' provided sshd; have not JUST an options line 
present, but both the options line you mentioned AND another 
more liberal rule; OR have a defective form of the 'option' 
for the "command=\"\"" 'option' field

'authorized_keys2' has not been in the sshd man page for some 
time [checking with Google, I find: "The authorized_keys2 file 
has been deprecated since the OpenSSH 3.0 release (2001) ... " .]

http://marc.info/?l=openssh-unix-dev&m=100508718416162&w=2

which is stronger to the effect of obsolete.  If a option is 
not supporteed for eight years, one has to assume that the 
upstream is not interested in testing that behaviours remain 
as people who do not do a migration as they are told to 
expected.

-- Russ herrold

OK, I have solved problem :D. Option command and key should be on one
line. Sorry :)

2009/10/31 happymaster23 <happymaster23 at
gmail.com>:
> Hello,
>
> as I have read manual, if I use in file authorized_keys option
> command="" with some command, no other commands will be
permitted. I
> have tried it, created authorized_keys2 for root and added there
> command="rdiff-backup --server" and after that tried to login.
Thit
> command was executed, but I was normally able to supply other comand
> as root. Can you tell me why?
>
> Thank you
> Martin
>