summaryrefslogtreecommitdiff
path: root/interface-definitions
diff options
context:
space:
mode:
authorChloe Surett <chloe@surett.me>2025-11-17 11:57:09 -0500
committerChristian Breunig <christian@breunig.cc>2026-01-15 16:25:45 +0100
commit2473e1bfdeeb0ea7cc47a14811c29cc4801c8038 (patch)
tree8bb10b93d70a567f1f0e24bb2625a12e310cb48a /interface-definitions
parent0c373c7c9cf0fff573e5acc5642f6af63c311da2 (diff)
downloadvyos-1x-2473e1bfdeeb0ea7cc47a14811c29cc4801c8038.tar.gz
vyos-1x-2473e1bfdeeb0ea7cc47a14811c29cc4801c8038.zip
ssh: T7483: Add fido2 PubkeyAuthOptions
Diffstat (limited to 'interface-definitions')
-rw-r--r--interface-definitions/service_ssh.xml.in19
1 files changed, 19 insertions, 0 deletions
diff --git a/interface-definitions/service_ssh.xml.in b/interface-definitions/service_ssh.xml.in
index 9fd9e32c3..7a1348404 100644
--- a/interface-definitions/service_ssh.xml.in
+++ b/interface-definitions/service_ssh.xml.in
@@ -61,6 +61,25 @@
<valueless/>
</properties>
</leafNode>
+ <node name="fido">
+ <properties>
+ <help>FIDO2 SSH options</help>
+ </properties>
+ <children>
+ <leafNode name="pin-required">
+ <properties>
+ <help>Require FIDO2 keys to attest that a user has been verified (e.g. via a PIN)</help>
+ <valueless/>
+ </properties>
+ </leafNode>
+ <leafNode name="touch-required">
+ <properties>
+ <help>Require FIDO2 keys to attest that a user is physically present</help>
+ <valueless/>
+ </properties>
+ </leafNode>
+ </children>
+ </node>
<node name="dynamic-protection">
<properties>
<help>Allow dynamic protection</help>