WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-02-02 20:59:02 +08:00
Code Issues Packages Projects Releases Wiki Activity

Disable TCP forwarding on sshd

Browse Source 
While there is a firewall on most of the the hosting facilities used
by the project, this is another layer of protection.
This commit is contained in:
Michael Scherer
2026-01-05 12:22:16 +01:00
committed by kevin
parent 71c59eb4c4
commit 4a6c6cf37e
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
roles/basessh/templates/sshd_config.j2
View File

@@ -40,6 +40,7 @@ UsePAM yes
AllowAgentForwarding no
X11Forwarding no
PermitTunnel no
AllowTcpForwarding no
# Accept locale-related environment
AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES