| commit | 4f755cdc05f5c6dee7cb1894f8d3bcaee33443d0 | [log] [tgz] |
|---|---|---|
| author | Damien Miller <djm@mindrot.org> | Mon May 19 14:57:41 2008 +1000 |
| committer | Damien Miller <djm@mindrot.org> | Mon May 19 14:57:41 2008 +1000 |
| tree | 73c05a3429a9d63d32b373fd3bd92900d43883da | |
| parent | bacb7fbd7e7716a4d3148769d43d8896cbfb2c54 [diff] |
- pyr@cvs.openbsd.org 2008/05/07 05:49:37
[servconf.c servconf.h session.c sshd_config.5]
Enable the AllowAgentForwarding option in sshd_config (global and match
context), to specify if agents should be permitted on the server.
As the man page states:
``Note that disabling Agent forwarding does not improve security
unless users are also denied shell access, as they can always install
their own forwarders.''
ok djm@, ok and a mild frown markus@