Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 Feb 2000 23:15:34 +0200
From:      Mark Murray <mark@grondar.za>
To:        Robert Watson <robert+freebsd@cyrus.watson.org>
Cc:        Mark Murray <markm@FreeBSD.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/crypto/openssh auth-krb5.c auth-krb4.c auth-passwd.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh.h sshconnect.c sshd.8 sshd.c 
Message-ID:  <200002282115.XAA71246@grimreaper.grondar.za>
In-Reply-To: <Pine.NEB.3.96L.1000228154054.37011G-100000@fledge.watson.org> ; from Robert Watson <robert@cyrus.watson.org>  "Mon, 28 Feb 2000 15:42:34 EST."
References:  <Pine.NEB.3.96L.1000228154054.37011G-100000@fledge.watson.org> 

next in thread | previous in thread | raw e-mail | index | archive | help
> Unrelated to the commit I replied to, but could you verify that SSH X11
> forwarding is disabled in the client by default?  I just had the
> opportunity to toast Theo on bugtraq for making misleading statements
> about that setting on the OpenBSD side... :-)  You might want to reenable
> forwarding on the server, unless you know of a specific security risk to
> the server associate associated with that (I don't offhand, but it doesn't
> mean one doesn't exist).

At the moment, X11 forwarding is ON. I saw a convincing argument
on bugtraq today for turning it off.

M
--
Mark Murray
Join the anti-SPAM movement: http://www.cauce.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200002282115.XAA71246>