summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2026-01-17 09:54:08 +0100
committerGitHub <noreply@github.com>2026-01-17 09:54:08 +0100
commit0868f3dc7246ea44a1765cee04649cd08c188982 (patch)
tree20d4777afdd5deb059b68649abea063d1555a7f1 /interface-definitions
parent240123722abf90e0d6bbe46efc81895fbc75825b (diff)
parent2473e1bfdeeb0ea7cc47a14811c29cc4801c8038 (diff)
downloadvyos-1x-0868f3dc7246ea44a1765cee04649cd08c188982.tar.gz
vyos-1x-0868f3dc7246ea44a1765cee04649cd08c188982.zip
Merge pull request #4852 from scj643/ssh-fido2-options
ssh: T7483: Add fido2 PubkeyAuthOptions
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/service_ssh.xml.in19
1 files changed, 19 insertions, 0 deletions
diff --git a/interface-definitions/service_ssh.xml.in b/interface-definitions/service_ssh.xml.in
index 9fd9e32c3..7a1348404 100644
--- a/interface-definitions/service_ssh.xml.in
+++ b/interface-definitions/service_ssh.xml.in
@@ -61,6 +61,25 @@
<valueless/>
</properties>
</leafNode>
+ <node name="fido">
+ <properties>
+ <help>FIDO2 SSH options</help>
+ </properties>
+ <children>
+ <leafNode name="pin-required">
+ <properties>
+ <help>Require FIDO2 keys to attest that a user has been verified (e.g. via a PIN)</help>
+ <valueless/>
+ </properties>
+ </leafNode>
+ <leafNode name="touch-required">
+ <properties>
+ <help>Require FIDO2 keys to attest that a user is physically present</help>
+ <valueless/>
+ </properties>
+ </leafNode>
+ </children>
+ </node>
<node name="dynamic-protection">
<properties>
<help>Allow dynamic protection</help>