Feature disappeared?

[Hank Leininger]

On 2000-10-30, Gert Doering <gert at greenie.muc.de> wrote:

> Well, dropping AllowHosts doesn't mean dropping functionality (because
> it can be done via TCP wrappers).

> Dropping AllowSHosts means "I can't do that anymore", which should have
> security reasons, which I don't see any right now...

Hm.  Can you get the same effect by populating /etc/ssh_known_hosts (or its
moral equivalent) with the public keys of hosts you wish to allow, and then
setting IgnoreUserKnownHosts?  This would prevent users from adding other
hosts to .shosts, no?  Though it might be deemed too much administrative
overhead to maintain...

--
Hank Leininger <hlein at progressive-comp.com>