[Bug 2317] sshd_config man page not clear on PermitUserEnvironment

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Dec 11 15:59:05 EST 2014


https://bugzilla.mindrot.org/show_bug.cgi?id=2317

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |WONTFIX
             Status|NEW                         |RESOLVED
                 CC|                            |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Unfortunately the reality is a little more complex than that.
Restricted accounts may be invoked by the user's shell that may be
affected by environment variables. It's impractical to list all the
possible cases where enabling this has unexpected consequences, so we
leave it to the administrator's discretion and knowledge of their own
system.

I don't see any reason to modify the text to weaken the warning.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list