Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/CISOfy/lynis.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLukas Pirl <github@lukas-pirl.de>2016-07-11 12:25:51 +0300
committerMichael Boelen <michael@cisofy.com>2016-07-11 12:25:51 +0300
commitf19f5927a589c4475ef42862342ee6ed7e5e93a8 (patch)
treec8d2c444d00b4e947f0698bde45a675b26de22f9 /include/tests_ssh
parent576e11b995920cc72f7ae69479de569664f85b50 (diff)
added test for AllowAgentForwarding being turned off (#222)
for reasons, see links below: https://wiki.mozilla.org/Security/Guidelines/OpenSSH#SSH_agent_forwarding https://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-considered-harmful/
Diffstat (limited to 'include/tests_ssh')
-rw-r--r--include/tests_ssh3
1 files changed, 2 insertions, 1 deletions
diff --git a/include/tests_ssh b/include/tests_ssh
index 708c05f1..61c038b2 100644
--- a/include/tests_ssh
+++ b/include/tests_ssh
@@ -129,7 +129,8 @@
UseDNS:NO,,YES:=\
UsePrivilegeSeparation:SANDBOX,YES,NO:=\
VerifyReverseMapping:YES,,NO:=\
- X11Forwarding:NO,,YES:="
+ X11Forwarding:NO,,YES:=\
+ AllowAgentForwarding:NO,,YES:="
# Disabled MaxStartups:4,8,16:<\ (needs fixing)