[Bug 3957] Support appending to AuthorizedKeysFile

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Sat May 2 02:34:33 AEST 2026


https://bugzilla.mindrot.org/show_bug.cgi?id=3957

--- Comment #1 from Dusty Mabe <dusty at dustymabe.com> ---
I realize here that we wouldn't want to change the existing behavior,
so we'd need a way to implement this that wouldn't do that.

There are different ways to achieve this goal and I'm sure the
maintainers of OpenSSH would know best, but one way could be to make a
prepended+ do just that:

So

```
AuthorizedKeysFile=${CREDENTIALS_DIRECTORY}/ssh.ephemeral-authorized_keys-all
```

would override all previous entries, while

```
AuthorizedKeysFile=+${CREDENTIALS_DIRECTORY}/ssh.ephemeral-authorized_keys-all
```

woud append.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list