1
0
mirror of https://github.com/CISOfy/lynis.git synced 2025-04-08 17:15:25 +02:00

added test for AllowAgentForwarding being turned off ()

for reasons, see links below:
  https://wiki.mozilla.org/Security/Guidelines/OpenSSH#SSH_agent_forwarding
  https://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-considered-harmful/
This commit is contained in:
Lukas Pirl 2016-07-11 11:25:51 +02:00 committed by Michael Boelen
parent 576e11b995
commit f19f5927a5

@ -129,7 +129,8 @@
UseDNS:NO,,YES:=\
UsePrivilegeSeparation:SANDBOX,YES,NO:=\
VerifyReverseMapping:YES,,NO:=\
X11Forwarding:NO,,YES:="
X11Forwarding:NO,,YES:=\
AllowAgentForwarding:NO,,YES:="
# Disabled MaxStartups:4,8,16:<\ (needs fixing)