mirror of
https://github.com/GrapheneOS/infrastructure.git
synced 2024-12-23 05:59:22 -05:00
sshd: disable unused agent forwarding feature
This is a misguided feature and while this doesn't meaningfully reduce attack surface, it makes sense not to enable it.
This commit is contained in:
parent
1d9d5df54c
commit
1a195570c8
@ -86,7 +86,7 @@ KbdInteractiveAuthentication no
|
|||||||
# and KbdInteractiveAuthentication to 'no'.
|
# and KbdInteractiveAuthentication to 'no'.
|
||||||
UsePAM yes
|
UsePAM yes
|
||||||
|
|
||||||
#AllowAgentForwarding yes
|
AllowAgentForwarding no
|
||||||
#AllowTcpForwarding yes
|
#AllowTcpForwarding yes
|
||||||
#GatewayPorts no
|
#GatewayPorts no
|
||||||
#X11Forwarding no
|
#X11Forwarding no
|
||||||
|
Loading…
Reference in New Issue
Block a user