瀏覽代碼

sshd config: explicitly disable all forms of forwarding (redundant setting)

https://github.com/fphammerle/docker-mysqldump-sshd/blob/b648c7635005b9ec5a6a9c6d4673ab718d2c88b8/sshd_config
Fabian Peter Hammerle 3 年之前
父節點
當前提交
2b346a8b11
共有 1 個文件被更改,包括 3 次插入0 次删除
  1. 3 0
      sshd_config

+ 3 - 0
sshd_config

@@ -23,9 +23,12 @@ PasswordAuthentication no
 ChallengeResponseAuthentication no
 ChallengeResponseAuthentication no
 StrictModes no
 StrictModes no
 
 
+DisableForwarding yes
 AllowAgentForwarding no
 AllowAgentForwarding no
+AllowStreamLocalForwarding no
 AllowTcpForwarding no
 AllowTcpForwarding no
 GatewayPorts no
 GatewayPorts no
+PermitTunnel no
 X11Forwarding no
 X11Forwarding no
 PermitUserEnvironment no
 PermitUserEnvironment no
 PrintMotd no
 PrintMotd no