Skip to content
Snippets Groups Projects
Commit 5211b1b2 authored by Jean-Paul Calderone's avatar Jean-Paul Calderone
Browse files

Disable agent forwarding

parent e8c5bde6
Branches
No related tags found
3 merge requests!101Merge staging into production,!100Merge develop into staging,!98Disable agent forwarding
Pipeline #673 failed
......@@ -37,6 +37,10 @@
# password-based authentication at all.
PermitEmptyPasswords no
# Agent forwarding is fraught. It can be used by an attacker to
# leverage one compromised system into more. Discourage its use.
AllowAgentForwarding no
# Only allow authentication as one of the configured users, not random
# other (often system-managed) users. Possibly this is also
# superfluous! NixOS system users have nologin as their shell ... so they
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment