tree 73c05a3429a9d63d32b373fd3bd92900d43883da
parent bacb7fbd7e7716a4d3148769d43d8896cbfb2c54
author Damien Miller <djm@mindrot.org> 1211173061 +1000
committer Damien Miller <djm@mindrot.org> 1211173061 +1000

   - pyr@cvs.openbsd.org 2008/05/07 05:49:37
     [servconf.c servconf.h session.c sshd_config.5]
     Enable the AllowAgentForwarding option in sshd_config (global and match
     context), to specify if agents should be permitted on the server.
     As the man page states:
     ``Note that disabling Agent forwarding does not improve security
     unless users are also denied shell access, as they can always install
     their own forwarders.''
     ok djm@, ok and a mild frown markus@