From f19f5927a589c4475ef42862342ee6ed7e5e93a8 Mon Sep 17 00:00:00 2001
From: Lukas Pirl <github@lukas-pirl.de>
Date: Mon, 11 Jul 2016 11:25:51 +0200
Subject: added test for AllowAgentForwarding being turned off (#222)

for reasons, see links below:
  https://wiki.mozilla.org/Security/Guidelines/OpenSSH#SSH_agent_forwarding
  https://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-considered-harmful/
---
 include/tests_ssh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/include/tests_ssh b/include/tests_ssh
index 708c05f1..61c038b2 100644
--- a/include/tests_ssh
+++ b/include/tests_ssh
@@ -129,7 +129,8 @@
                 UseDNS:NO,,YES:=\
                 UsePrivilegeSeparation:SANDBOX,YES,NO:=\
                 VerifyReverseMapping:YES,,NO:=\
-                X11Forwarding:NO,,YES:="
+                X11Forwarding:NO,,YES:=\
+                AllowAgentForwarding:NO,,YES:="
 
         # Disabled        MaxStartups:4,8,16:<\ (needs fixing)
 
-- 
cgit v1.2.3