Patch to add "warn" value to ForwardX11 and ForwardAgent

Markus Friedl markus at openbsd.org
Sat Oct 27 08:09:24 EST 2001


On Fri, Oct 26, 2001 at 04:11:30PM -0500, Dave Dykstra wrote:
> Because ForwardX11 and ForwardAgent are so useful but introduce risk when
> used to a not well-secured server, I added a "warn" value to the ForwardX11
> and ForwardAgent options which causes the ssh client to print a big warning
> whenever the forwarding is actually used.  I plan to make "ForwardX11=warn"
> the default in my ssh_config distribution.

why is this better then having
	ForwardX11=no
and using
	-X
to enable forwarding on a 'need' basis?

-m



More information about the openssh-unix-dev mailing list