summaryrefslogtreecommitdiff
path: root/sshd_config.5
diff options
context:
space:
mode:
authorColin Watson <cjwatson@debian.org>2014-02-09 16:10:18 +0000
committerColin Watson <cjwatson@debian.org>2017-08-22 16:24:44 +0100
commitcf60afd3438c444e20b114fbd799168002c74aae (patch)
tree84d004fcc4229ddab1e3b7113a0c644c0305bd9f /sshd_config.5
parent49ea641997b0dce73df3271f10a875cb702729b7 (diff)
Various Debian-specific configuration changes
ssh: Enable ForwardX11Trusted, returning to earlier semantics which cause fewer problems with existing setups (http://bugs.debian.org/237021). ssh: Set 'SendEnv LANG LC_*' by default (http://bugs.debian.org/264024). ssh: Enable HashKnownHosts by default to try to limit the spread of ssh worms. ssh: Enable GSSAPIAuthentication by default. sshd: Enable PAM, disable ChallengeResponseAuthentication, and disable PrintMotd. sshd: Enable X11Forwarding. sshd: Set 'AcceptEnv LANG LC_*' by default. sshd: Change sftp subsystem path to /usr/lib/openssh/sftp-server. Document all of this. Author: Russ Allbery <rra@debian.org> Forwarded: not-needed Last-Update: 2016-12-26 Patch-Name: debian-config.patch
Diffstat (limited to 'sshd_config.5')
-rw-r--r--sshd_config.522
1 files changed, 22 insertions, 0 deletions
diff --git a/sshd_config.5 b/sshd_config.5
index 603c2ba7e..cc5d9fb0a 100644
--- a/sshd_config.5
+++ b/sshd_config.5
@@ -57,6 +57,28 @@ Arguments may optionally be enclosed in double quotes
57.Pq \&" 57.Pq \&"
58in order to represent arguments containing spaces. 58in order to represent arguments containing spaces.
59.Pp 59.Pp
60Note that the Debian
61.Ic openssh-server
62package sets several options as standard in
63.Pa /etc/ssh/sshd_config
64which are not the default in
65.Xr sshd 8 :
66.Pp
67.Bl -bullet -offset indent -compact
68.It
69.Cm ChallengeResponseAuthentication No no
70.It
71.Cm X11Forwarding No yes
72.It
73.Cm PrintMotd No no
74.It
75.Cm AcceptEnv No LANG LC_*
76.It
77.Cm Subsystem No sftp /usr/lib/openssh/sftp-server
78.It
79.Cm UsePAM No yes
80.El
81.Pp
60The possible 82The possible
61keywords and their meanings are as follows (note that 83keywords and their meanings are as follows (note that
62keywords are case-insensitive and arguments are case-sensitive): 84keywords are case-insensitive and arguments are case-sensitive):