summaryrefslogtreecommitdiff
path: root/sshd_config.5
diff options
context:
space:
mode:
Diffstat (limited to 'sshd_config.5')
-rw-r--r--sshd_config.522
1 files changed, 11 insertions, 11 deletions
diff --git a/sshd_config.5 b/sshd_config.5
index b93c801e3..99b5621e7 100644
--- a/sshd_config.5
+++ b/sshd_config.5
@@ -34,8 +34,8 @@
34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36.\" 36.\"
37.\" $OpenBSD: sshd_config.5,v 1.88 2008/05/07 05:49:37 pyr Exp $ 37.\" $OpenBSD: sshd_config.5,v 1.89 2008/05/07 08:00:14 jmc Exp $
38.Dd $Mdocdate: May 7 2008 $ 38.Dd $Mdocdate: May 19 2008 $
39.Dt SSHD_CONFIG 5 39.Dt SSHD_CONFIG 5
40.Os 40.Os
41.Sh NAME 41.Sh NAME
@@ -95,6 +95,15 @@ Valid arguments are
95(use IPv6 only). 95(use IPv6 only).
96The default is 96The default is
97.Dq any . 97.Dq any .
98.It Cm AllowAgentForwarding
99Specifies whether
100.Xr ssh-agent 1
101forwarding is permitted.
102The default is
103.Dq yes .
104Note that disabling agent forwarding does not improve security
105unless users are also denied shell access, as they can always install
106their own forwarders.
98.It Cm AllowGroups 107.It Cm AllowGroups
99This keyword can be followed by a list of group name patterns, separated 108This keyword can be followed by a list of group name patterns, separated
100by spaces. 109by spaces.
@@ -114,15 +123,6 @@ See
114in 123in
115.Xr ssh_config 5 124.Xr ssh_config 5
116for more information on patterns. 125for more information on patterns.
117.It Cm AllowAgentForwarding
118Specifies whether
119.Xr ssh-agent 1
120forwarding is permitted.
121The default is
122.Dq yes .
123Note that disabling Agent forwarding does not improve security
124unless users are also denied shell access, as they can always install
125their own forwarders.
126.It Cm AllowTcpForwarding 126.It Cm AllowTcpForwarding
127Specifies whether TCP forwarding is permitted. 127Specifies whether TCP forwarding is permitted.
128The default is 128The default is