mirror of
https://github.com/GrapheneOS/infrastructure.git
synced 2025-06-25 07:00:35 -04:00
sshd: disable unused agent forwarding feature
This is a misguided feature and while this doesn't meaningfully reduce attack surface, it makes sense not to enable it.
This commit is contained in:
parent
1d9d5df54c
commit
1a195570c8
1 changed files with 1 additions and 1 deletions
|
@ -86,7 +86,7 @@ KbdInteractiveAuthentication no
|
||||||
# and KbdInteractiveAuthentication to 'no'.
|
# and KbdInteractiveAuthentication to 'no'.
|
||||||
UsePAM yes
|
UsePAM yes
|
||||||
|
|
||||||
#AllowAgentForwarding yes
|
AllowAgentForwarding no
|
||||||
#AllowTcpForwarding yes
|
#AllowTcpForwarding yes
|
||||||
#GatewayPorts no
|
#GatewayPorts no
|
||||||
#X11Forwarding no
|
#X11Forwarding no
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue