diff options
author | Ben Lindstrom <mouring@eviladmin.org> | 2001-06-21 03:14:49 +0000 |
---|---|---|
committer | Ben Lindstrom <mouring@eviladmin.org> | 2001-06-21 03:14:49 +0000 |
commit | 699776e9ec1378c1e962146a15436e888e9594b0 (patch) | |
tree | 0189dbbe436772e1635270a00b2cb9ce09f1d508 /sshd.8 | |
parent | c85ab8afab0b1f73cda607859f32f0d9558af594 (diff) |
- markus@cvs.openbsd.org 2001/06/19 14:09:45
[session.c sshd.8]
disable x11-fwd if use_login is enabled; from lukem@wasabisystems.com
Diffstat (limited to 'sshd.8')
-rw-r--r-- | sshd.8 | 16 |
1 files changed, 13 insertions, 3 deletions
@@ -34,7 +34,7 @@ | |||
34 | .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF | 34 | .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
35 | .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | 35 | .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
36 | .\" | 36 | .\" |
37 | .\" $OpenBSD: sshd.8,v 1.126 2001/06/11 16:04:38 markus Exp $ | 37 | .\" $OpenBSD: sshd.8,v 1.127 2001/06/19 14:09:45 markus Exp $ |
38 | .Dd September 25, 1999 | 38 | .Dd September 25, 1999 |
39 | .Dt SSHD 8 | 39 | .Dt SSHD 8 |
40 | .Os | 40 | .Os |
@@ -796,11 +796,18 @@ The default is AUTH. | |||
796 | Specifies whether | 796 | Specifies whether |
797 | .Xr login 1 | 797 | .Xr login 1 |
798 | is used for interactive login sessions. | 798 | is used for interactive login sessions. |
799 | The default is | ||
800 | .Dq no . | ||
799 | Note that | 801 | Note that |
800 | .Xr login 1 | 802 | .Xr login 1 |
801 | is never used for remote command execution. | 803 | is never used for remote command execution. |
802 | The default is | 804 | Note also, that if this is enabled, |
803 | .Dq no . | 805 | .Cm X11Forwarding |
806 | will be disabled because | ||
807 | .Xr login 1 | ||
808 | does not know how to handle | ||
809 | .Xr xauth 1 | ||
810 | cookies. | ||
804 | .It Cm X11DisplayOffset | 811 | .It Cm X11DisplayOffset |
805 | Specifies the first display number available for | 812 | Specifies the first display number available for |
806 | .Nm sshd Ns 's | 813 | .Nm sshd Ns 's |
@@ -815,6 +822,9 @@ The default is | |||
815 | .Dq no . | 822 | .Dq no . |
816 | Note that disabling X11 forwarding does not improve security in any | 823 | Note that disabling X11 forwarding does not improve security in any |
817 | way, as users can always install their own forwarders. | 824 | way, as users can always install their own forwarders. |
825 | X11 forwarding is automatically disabled if | ||
826 | .Cm UseLogin | ||
827 | is enabled. | ||
818 | .It Cm XAuthLocation | 828 | .It Cm XAuthLocation |
819 | Specifies the location of the | 829 | Specifies the location of the |
820 | .Xr xauth 1 | 830 | .Xr xauth 1 |