[plug] ssh & X window

Bernard bernard at blackham.com.au
Thu Oct 18 17:20:35 WST 2001


On Thu, Oct 18, 2001 at 11:02:53AM +0800, Christian wrote:
> diffie:~$ grep Forward /etc/ssh/ssh_config 
> ### ForwardX11 & ForwardAgent
>     ForwardAgent yes
>     ForwardX11 yes
> #   ForwardAgent no
> #   ForwardX11 no

Grep doesn't show contexts. My /etc/ssh/ssh_config contains:

<snip>
#######
### ForwardX11 & ForwardAgent
###   For security reasons, OpenSSH defaults to ``no'' for these settings 
###   You should only enable them for hosts where you specifically trust the
###   administrators of the remote machine, otherwise you are leaving
###   yourself open to X11 based attacks, or to allowing your keys to be used
###   by others from the remote machine.   See also: ssh -X -x -A & -a options

# we might as well switch them back on for localhost though
Host localhost
   ForwardAgent yes
   ForwardX11 yes

# Site-wide defaults for various options

# Host *
#   ForwardAgent no
#   ForwardX11 no
</snip>

Try uncommenting those last three lines shown. Or if you're security
paranoid, make definitions for the hosts that you need them for or
trust.


Bernard.

-- 
 Bernard Blackham
 bernard at blackham.com.au



More information about the plug mailing list