summary refs log tree commit diff
diff options
context:
space:
mode:
authorJune McEnroe <june@causal.agency>2020-06-25 00:40:00 -0400
committerJune McEnroe <june@causal.agency>2020-06-25 00:40:00 -0400
commit529028fe4a2973aaae466c294b43d8d59f380f9d (patch)
tree580f3e31e17a12c0774ba21aab69ad0da495f0b7
parentBump ParamCap to 254 (diff)
downloadcatgirl-529028fe4a2973aaae466c294b43d8d59f380f9d.tar.gz
catgirl-529028fe4a2973aaae466c294b43d8d59f380f9d.zip
Use DisableForwarding in sshd_config
-rw-r--r--scripts/sshd_config6
1 files changed, 1 insertions, 5 deletions
diff --git a/scripts/sshd_config b/scripts/sshd_config
index 4669f7f..c7e99ec 100644
--- a/scripts/sshd_config
+++ b/scripts/sshd_config
@@ -5,9 +5,5 @@ Match User chat
 	PermitEmptyPasswords yes
 	ChrootDirectory /home/chat
 	ForceCommand catgirl-prompt
-
-	AllowAgentForwarding no
-	AllowTcpForwarding no
-	AllowStreamLocalForwarding no
+	DisableForwarding yes
 	MaxSessions 1
-	X11Forwarding no
gmsg'> This leverages the new lua support. See filters/simple-authentication.lua for explaination of how this works. There is also additional documentation in cgitrc.5.txt. Though this is a cookie-based approach, cgit's caching mechanism is preserved for authenticated pages. Very plugable and extendable depending on user needs. The sample script uses an HMAC-SHA1 based cookie to store the currently logged in user, with an expiration date. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> 2014-01-16t0111: Additions and fixesLukas Fleischer * Rename the capitalize-* filters to dump.* since they also dump the arguments. * Add full argument validation to the email filters. Signed-off-by: Lukas Fleischer <cgit@cryptocrack.de> 2014-01-16parsing.c: Remove leading space from committerLukas Fleischer