diff options
| author | Alex Pooley (@zuedev) <zuedev@gmail.com> | 2026-05-07 18:07:55 +0100 |
|---|---|---|
| committer | Alex Pooley (@zuedev) <zuedev@gmail.com> | 2026-05-07 18:07:55 +0100 |
| commit | 56687a86c00d6c14fc4681b99c218e244d4ad94c (patch) | |
| tree | 9cce04f94068403644dbe85d6ddb14e3ac1b2bd3 | |
| parent | 990e758685da6049e4fb197df909d7e13e9c7c16 (diff) | |
| download | git.zue.dev-56687a86c00d6c14fc4681b99c218e244d4ad94c.tar git.zue.dev-56687a86c00d6c14fc4681b99c218e244d4ad94c.tar.gz git.zue.dev-56687a86c00d6c14fc4681b99c218e244d4ad94c.tar.bz2 git.zue.dev-56687a86c00d6c14fc4681b99c218e244d4ad94c.tar.xz git.zue.dev-56687a86c00d6c14fc4681b99c218e244d4ad94c.zip | |
Harden the SSH `Match` block
| -rw-r--r-- | etc/ssh/sshd_config | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/etc/ssh/sshd_config b/etc/ssh/sshd_config index 97ae415..b41c289 100644 --- a/etc/ssh/sshd_config +++ b/etc/ssh/sshd_config @@ -1,2 +1,7 @@ Match User git - ForceCommand /usr/local/bin/git-wrapper
\ No newline at end of file + ForceCommand /usr/local/bin/git-wrapper + AllowAgentForwarding no + AllowTcpForwarding no + X11Forwarding no + PermitTTY no + PermitUserRC no
\ No newline at end of file |
