From owner-cvs-all Mon Feb 28 13:16:30 2000 Delivered-To: cvs-all@freebsd.org Received: from grimreaper.grondar.za (nld-dial-196-7-200-33.mweb.co.za [196.7.200.33]) by hub.freebsd.org (Postfix) with ESMTP id EE0F437B6FA; Mon, 28 Feb 2000 13:16:13 -0800 (PST) (envelope-from mark@grondar.za) Received: from grimreaper.grondar.za (localhost [127.0.0.1]) by grimreaper.grondar.za (8.9.3/8.9.3) with ESMTP id XAA71246; Mon, 28 Feb 2000 23:15:34 +0200 (SAST) (envelope-from mark@grimreaper.grondar.za) Message-Id: <200002282115.XAA71246@grimreaper.grondar.za> To: Robert Watson Cc: Mark Murray , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/crypto/openssh auth-krb5.c auth-krb4.c auth-passwd.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh.h sshconnect.c sshd.8 sshd.c References: In-Reply-To: ; from Robert Watson "Mon, 28 Feb 2000 15:42:34 EST." Date: Mon, 28 Feb 2000 23:15:34 +0200 From: Mark Murray Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk > Unrelated to the commit I replied to, but could you verify that SSH X11 > forwarding is disabled in the client by default? I just had the > opportunity to toast Theo on bugtraq for making misleading statements > about that setting on the OpenBSD side... :-) You might want to reenable > forwarding on the server, unless you know of a specific security risk to > the server associate associated with that (I don't offhand, but it doesn't > mean one doesn't exist). At the moment, X11 forwarding is ON. I saw a convincing argument on bugtraq today for turning it off. M -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message