summaryrefslogtreecommitdiff
path: root/system/openssh/disable-forwarding-by-default.patch
diff options
context:
space:
mode:
authorA. Wilcox <AWilcox@Wilcox-Tech.com>2018-07-29 03:13:39 -0500
committerA. Wilcox <AWilcox@Wilcox-Tech.com>2018-07-29 03:13:39 -0500
commit2552843d964162f7ba105775c05a231d9cdd4ae8 (patch)
tree977329dfae41ddd4e28b52914b1322516a86763b /system/openssh/disable-forwarding-by-default.patch
parentcf4e117cdbf94bf75339cd49de4161a8c6189bbc (diff)
downloadpackages-2552843d964162f7ba105775c05a231d9cdd4ae8.tar.gz
packages-2552843d964162f7ba105775c05a231d9cdd4ae8.tar.bz2
packages-2552843d964162f7ba105775c05a231d9cdd4ae8.tar.xz
packages-2552843d964162f7ba105775c05a231d9cdd4ae8.zip
system/openssh: disable TCP forwarding by default
Diffstat (limited to 'system/openssh/disable-forwarding-by-default.patch')
-rw-r--r--system/openssh/disable-forwarding-by-default.patch16
1 files changed, 16 insertions, 0 deletions
diff --git a/system/openssh/disable-forwarding-by-default.patch b/system/openssh/disable-forwarding-by-default.patch
new file mode 100644
index 000000000..9d27926d9
--- /dev/null
+++ b/system/openssh/disable-forwarding-by-default.patch
@@ -0,0 +1,16 @@
+--- openssh-7.7p1/sshd_config.old 2018-04-02 00:38:28.000000000 -0500
++++ openssh-7.7p1/sshd_config 2018-07-29 03:08:16.340000000 -0500
+@@ -82,9 +82,10 @@
+ #UsePAM no
+
+ #AllowAgentForwarding yes
+-#AllowTcpForwarding yes
+-#GatewayPorts no
+-#X11Forwarding no
++# Feel free to re-enable these if your use case requires them.
++AllowTcpForwarding no
++GatewayPorts no
++X11Forwarding no
+ #X11DisplayOffset 10
+ #X11UseLocalhost yes
+ #PermitTTY yes