diff options
author | Colin Watson <cjwatson@debian.org> | 2014-02-09 16:10:18 +0000 |
---|---|---|
committer | Colin Watson <cjwatson@debian.org> | 2015-12-07 23:06:46 +0000 |
commit | 9351b179c72f18dc1b1d5bb84b2a7dab5e0af3fc (patch) | |
tree | d84c03f6160ee5a2640e26127df78cef6f1aa773 /sshd_config | |
parent | 92c6b1dc352b03c7bdecc6ce9bfef7a3b2b54bbc (diff) |
Various Debian-specific configuration changes
ssh: Enable ForwardX11Trusted, returning to earlier semantics which cause
fewer problems with existing setups (http://bugs.debian.org/237021).
ssh: Set 'SendEnv LANG LC_*' by default (http://bugs.debian.org/264024).
ssh: Enable HashKnownHosts by default to try to limit the spread of ssh
worms.
ssh: Enable GSSAPIAuthentication and disable GSSAPIDelegateCredentials by
default.
Document all of this, along with several sshd defaults set in
debian/openssh-server.postinst.
Author: Russ Allbery <rra@debian.org>
Forwarded: not-needed
Last-Update: 2015-12-07
Patch-Name: debian-config.patch
Diffstat (limited to 'sshd_config')
-rw-r--r-- | sshd_config | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sshd_config b/sshd_config index 64786c935..d8338dbd2 100644 --- a/sshd_config +++ b/sshd_config | |||
@@ -125,7 +125,7 @@ UsePrivilegeSeparation sandbox # Default for new installations. | |||
125 | #Banner none | 125 | #Banner none |
126 | 126 | ||
127 | # override default of no subsystems | 127 | # override default of no subsystems |
128 | Subsystem sftp /usr/libexec/sftp-server | 128 | Subsystem sftp /usr/lib/openssh/sftp-server |
129 | 129 | ||
130 | # Example of overriding settings on a per-user basis | 130 | # Example of overriding settings on a per-user basis |
131 | #Match User anoncvs | 131 | #Match User anoncvs |