- djm@cvs.openbsd.org 2005/02/28 00:54:10
[ssh_config.5] bz#849: document timeout on untrusted x11 forwarding sessions. Reported by orion AT cora.nwra.com; ok markus@
This commit is contained in:
parent
70a908ec89
commit
1717fd422f
|
@ -15,6 +15,10 @@
|
||||||
[sshd.8]
|
[sshd.8]
|
||||||
add /etc/motd and $HOME/.hushlogin to FILES;
|
add /etc/motd and $HOME/.hushlogin to FILES;
|
||||||
from michael knudsen;
|
from michael knudsen;
|
||||||
|
- djm@cvs.openbsd.org 2005/02/28 00:54:10
|
||||||
|
[ssh_config.5]
|
||||||
|
bz#849: document timeout on untrusted x11 forwarding sessions. Reported by
|
||||||
|
orion AT cora.nwra.com; ok markus@
|
||||||
|
|
||||||
20050226
|
20050226
|
||||||
- (dtucker) [openbsd-compat/bsd-openpty.c openbsd-compat/inet_ntop.c]
|
- (dtucker) [openbsd-compat/bsd-openpty.c openbsd-compat/inet_ntop.c]
|
||||||
|
@ -2191,4 +2195,4 @@
|
||||||
- (djm) Trim deprecated options from INSTALL. Mention UsePAM
|
- (djm) Trim deprecated options from INSTALL. Mention UsePAM
|
||||||
- (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
|
- (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
|
||||||
|
|
||||||
$Id: ChangeLog,v 1.3670 2005/03/01 10:17:09 djm Exp $
|
$Id: ChangeLog,v 1.3671 2005/03/01 10:17:31 djm Exp $
|
||||||
|
|
|
@ -34,7 +34,7 @@
|
||||||
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
||||||
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
.\"
|
.\"
|
||||||
.\" $OpenBSD: ssh_config.5,v 1.41 2005/01/28 18:14:09 jmc Exp $
|
.\" $OpenBSD: ssh_config.5,v 1.42 2005/02/28 00:54:10 djm Exp $
|
||||||
.Dd September 25, 1999
|
.Dd September 25, 1999
|
||||||
.Dt SSH_CONFIG 5
|
.Dt SSH_CONFIG 5
|
||||||
.Os
|
.Os
|
||||||
|
@ -359,11 +359,16 @@ option is also enabled.
|
||||||
If this option is set to
|
If this option is set to
|
||||||
.Dq yes
|
.Dq yes
|
||||||
then remote X11 clients will have full access to the original X11 display.
|
then remote X11 clients will have full access to the original X11 display.
|
||||||
|
.Pp
|
||||||
If this option is set to
|
If this option is set to
|
||||||
.Dq no
|
.Dq no
|
||||||
then remote X11 clients will be considered untrusted and prevented
|
then remote X11 clients will be considered untrusted and prevented
|
||||||
from stealing or tampering with data belonging to trusted X11
|
from stealing or tampering with data belonging to trusted X11
|
||||||
clients.
|
clients.
|
||||||
|
Furthermore, the
|
||||||
|
.Xr xauth 1
|
||||||
|
token used for the session will be set to expire after 20 minutes.
|
||||||
|
Remote clients will be refused access after this time.
|
||||||
.Pp
|
.Pp
|
||||||
The default is
|
The default is
|
||||||
.Dq no .
|
.Dq no .
|
||||||
|
|
Loading…
Reference in New Issue