diff options
| author |   jmc <jmc@openbsd.org> | 2008-05-07 08:00:14 +0000 |
|---|---|---|
| committer | jmc <jmc@openbsd.org> | 2008-05-07 08:00:14 +0000 |
| commit | 66e00bc5d8a58df2d19acd6ea2a771089c9eba57 (patch) | |
| tree | 3fe74395a531a332a477fc84b1200859f32c4425 /usr.bin/ssh/sshd_config.5 | |
| parent | scrub allows tagged, too (diff) | |
| download | wireguard-openbsd-66e00bc5d8a58df2d19acd6ea2a771089c9eba57.tar.xz wireguard-openbsd-66e00bc5d8a58df2d19acd6ea2a771089c9eba57.zip | |
sort;
Diffstat (limited to 'usr.bin/ssh/sshd_config.5')
| -rw-r--r-- | usr.bin/ssh/sshd_config.5 | 20 |
1 files changed, 10 insertions, 10 deletions
diff --git a/usr.bin/ssh/sshd_config.5 b/usr.bin/ssh/sshd_config.5 index 1f95a717115..2e95d02c791 100644 --- a/usr.bin/ssh/sshd_config.5 +++ b/usr.bin/ssh/sshd_config.5 @@ -34,7 +34,7 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: sshd_config.5,v 1.88 2008/05/07 05:49:37 pyr Exp $ +.\" $OpenBSD: sshd_config.5,v 1.89 2008/05/07 08:00:14 jmc Exp $ .Dd $Mdocdate: May 7 2008 $ .Dt SSHD_CONFIG 5 .Os @@ -95,6 +95,15 @@ Valid arguments are (use IPv6 only). The default is .Dq any . +.It Cm AllowAgentForwarding +Specifies whether +.Xr ssh-agent 1 +forwarding is permitted. +The default is +.Dq yes . +Note that disabling agent forwarding does not improve security +unless users are also denied shell access, as they can always install +their own forwarders. .It Cm AllowGroups This keyword can be followed by a list of group name patterns, separated by spaces. @@ -114,15 +123,6 @@ See in .Xr ssh_config 5 for more information on patterns. -.It Cm AllowAgentForwarding -Specifies whether -.Xr ssh-agent 1 -forwarding is permitted. -The default is -.Dq yes . -Note that disabling Agent forwarding does not improve security -unless users are also denied shell access, as they can always install -their own forwarders. .It Cm AllowTcpForwarding Specifies whether TCP forwarding is permitted. The default is |