diff options
| author | Colin Watson <cjwatson@debian.org> | 2014-02-09 16:10:18 +0000 |
|---|---|---|
| committer | Colin Watson <cjwatson@debian.org> | 2016-01-14 15:07:37 +0000 |
| commit | 003a875a474100d250b6643270ef3874da6591d8 (patch) | |
| tree | d8b3e8bcd6e9202473c42f618beed971dfcf6058 /sshd_config | |
| parent | 9d88bc29443745ebf30004136ac18ced47292833 (diff) | |
Various Debian-specific configuration changes
ssh: Enable ForwardX11Trusted, returning to earlier semantics which cause
fewer problems with existing setups (http://bugs.debian.org/237021).
ssh: Set 'SendEnv LANG LC_*' by default (http://bugs.debian.org/264024).
ssh: Enable HashKnownHosts by default to try to limit the spread of ssh
worms.
ssh: Enable GSSAPIAuthentication and disable GSSAPIDelegateCredentials by
default.
Document all of this, along with several sshd defaults set in
debian/openssh-server.postinst.
Author: Russ Allbery <rra@debian.org>
Forwarded: not-needed
Last-Update: 2015-12-07
Patch-Name: debian-config.patch
Diffstat (limited to 'sshd_config')
| -rw-r--r-- | sshd_config | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sshd_config b/sshd_config index 64786c935..d8338dbd2 100644 --- a/sshd_config +++ b/sshd_config | |||
| @@ -125,7 +125,7 @@ UsePrivilegeSeparation sandbox # Default for new installations. | |||
| 125 | #Banner none | 125 | #Banner none |
| 126 | 126 | ||
| 127 | # override default of no subsystems | 127 | # override default of no subsystems |
| 128 | Subsystem sftp /usr/libexec/sftp-server | 128 | Subsystem sftp /usr/lib/openssh/sftp-server |
| 129 | 129 | ||
| 130 | # Example of overriding settings on a per-user basis | 130 | # Example of overriding settings on a per-user basis |
| 131 | #Match User anoncvs | 131 | #Match User anoncvs |