summaryrefslogtreecommitdiff
path: root/ssh_config
diff options
context:
space:
mode:
authorColin Watson <cjwatson@debian.org>2014-02-09 16:10:18 +0000
committerColin Watson <cjwatson@debian.org>2020-10-18 12:07:21 +0100
commita0c9f82b05d33f3e2cf8e5442cee47c09d1a1dd8 (patch)
tree1d383167149b22907153635b676d52f824681d66 /ssh_config
parente8453621b2a26f8d6afec405ff60201749b01e5e (diff)
Various Debian-specific configuration changes
ssh: Enable ForwardX11Trusted, returning to earlier semantics which cause fewer problems with existing setups (http://bugs.debian.org/237021). ssh: Set 'SendEnv LANG LC_*' by default (http://bugs.debian.org/264024). ssh: Enable HashKnownHosts by default to try to limit the spread of ssh worms. ssh: Enable GSSAPIAuthentication by default. ssh: Include /etc/ssh/ssh_config.d/*.conf. sshd: Enable PAM, disable ChallengeResponseAuthentication, and disable PrintMotd. sshd: Enable X11Forwarding. sshd: Set 'AcceptEnv LANG LC_*' by default. sshd: Change sftp subsystem path to /usr/lib/openssh/sftp-server. sshd: Include /etc/ssh/sshd_config.d/*.conf. Document all of this. Author: Russ Allbery <rra@debian.org> Forwarded: not-needed Last-Update: 2020-10-18 Patch-Name: debian-config.patch
Diffstat (limited to 'ssh_config')
-rw-r--r--ssh_config8
1 files changed, 7 insertions, 1 deletions
diff --git a/ssh_config b/ssh_config
index 52aae8692..09a17cf18 100644
--- a/ssh_config
+++ b/ssh_config
@@ -17,9 +17,12 @@
17# list of available options, their meanings and defaults, please see the 17# list of available options, their meanings and defaults, please see the
18# ssh_config(5) man page. 18# ssh_config(5) man page.
19 19
20# Host * 20Include /etc/ssh/ssh_config.d/*.conf
21
22Host *
21# ForwardAgent no 23# ForwardAgent no
22# ForwardX11 no 24# ForwardX11 no
25# ForwardX11Trusted yes
23# PasswordAuthentication yes 26# PasswordAuthentication yes
24# HostbasedAuthentication no 27# HostbasedAuthentication no
25# GSSAPIAuthentication no 28# GSSAPIAuthentication no
@@ -46,3 +49,6 @@
46# ProxyCommand ssh -q -W %h:%p gateway.example.com 49# ProxyCommand ssh -q -W %h:%p gateway.example.com
47# RekeyLimit 1G 1h 50# RekeyLimit 1G 1h
48# UserKnownHostsFile ~/.ssh/known_hosts.d/%k 51# UserKnownHostsFile ~/.ssh/known_hosts.d/%k
52 SendEnv LANG LC_*
53 HashKnownHosts yes
54 GSSAPIAuthentication yes