2021-01-30 20:00:06 +01:00
|
|
|
# Version Control System accounts musn't have X11Forwarding, TCP Forwarding
|
2021-02-02 13:12:43 +01:00
|
|
|
# or TTY. The anoncvs is usually a comment in stock sshd_config.
|
|
|
|
|
# The password blocking may only work in reverse so this file is partially
|
|
|
|
|
# useless. https://serverfault.com/a/461865 & OpenSSH_8.4p1
|
|
|
|
|
|
2021-01-30 20:00:06 +01:00
|
|
|
Match User anoncvs,git,gitea
|
2021-02-02 12:06:04 +01:00
|
|
|
PasswordAuthentication no
|
|
|
|
|
AuthenticationMethods publickey
|
2021-01-30 20:00:06 +01:00
|
|
|
X11Forwarding no
|
|
|
|
|
AllowTcpForwarding no
|
|
|
|
|
PermitTTY no
|
|
|
|
|
# ForceCommand cvs server
|
2021-02-02 12:58:35 +01:00
|
|
|
Match All
|
