From 5211fb772c3bab984ccafebbb8bfe9db024f0129 Mon Sep 17 00:00:00 2001
From: Mikaela Suomalainen <mikaela+git@mikaela.info>
Date: Sat, 30 Jan 2021 21:00:06 +0200
Subject: [PATCH] sshd_config.d: add anoncvs.conf

---
 etc/ssh/sshd_config.d/anoncvs.conf | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 etc/ssh/sshd_config.d/anoncvs.conf

diff --git a/etc/ssh/sshd_config.d/anoncvs.conf b/etc/ssh/sshd_config.d/anoncvs.conf
new file mode 100644
index 00000000..98f2c624
--- /dev/null
+++ b/etc/ssh/sshd_config.d/anoncvs.conf
@@ -0,0 +1,7 @@
+# Version Control System accounts musn't have X11Forwarding, TCP Forwarding
+# or TTY. The anoncvs is usually a comment in stock sshd_config
+Match User anoncvs,git,gitea
+	X11Forwarding no
+	AllowTcpForwarding no
+	PermitTTY no
+#	ForceCommand cvs server