From 56687a86c00d6c14fc4681b99c218e244d4ad94c Mon Sep 17 00:00:00 2001 From: "Alex Pooley (@zuedev)" Date: Thu, 7 May 2026 18:07:55 +0100 Subject: Harden the SSH `Match` block --- etc/ssh/sshd_config | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'etc/ssh') diff --git a/etc/ssh/sshd_config b/etc/ssh/sshd_config index 97ae415..b41c289 100644 --- a/etc/ssh/sshd_config +++ b/etc/ssh/sshd_config @@ -1,2 +1,7 @@ Match User git - ForceCommand /usr/local/bin/git-wrapper \ No newline at end of file + ForceCommand /usr/local/bin/git-wrapper + AllowAgentForwarding no + AllowTcpForwarding no + X11Forwarding no + PermitTTY no + PermitUserRC no \ No newline at end of file -- cgit v1.2.3