CVSROOT: /cvs
Module name: src
Changes by: d...@cvs.openbsd.org 2016/11/29 20:00:05
Modified files:
usr.bin/ssh : servconf.c servconf.h serverloop.c session.c
sshd_config.5
Log message:
Add a sshd_config DisableForwaring option that disables X11, agent,
TCP, tunnel and Unix domain socket forwarding, as well as anything
else we might implement in the future.
This, like the 'restrict' authorized_keys flag, is intended to be a
simple and future-proof way of restricting an account. Suggested as
a complement to 'restrict' by Jann Horn; ok markus@
