Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2024-11-22 03:09:22 +01:00
Code Issues Projects Releases Wiki Activity

ssh_config: add "UseRoaming no"

Browse Source 
https://twitter.com/msfriedl/status/687635945642967040
This commit is contained in:
Aminda Suomalainen 2016-01-14 16:44:27 +02:00
parent e80dbd29fe
commit 9d5db7ee3c
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
.mikaela/ssh/config
View File

@ -39,6 +39,12 @@ Host *
# manual). # manual).
UpdateHostKeys yes UpdateHostKeys yes
# Add undocumented "UseRoaming no" to ssh_config or use
# "-oUseRoaming=no" to prevent upcoming #openssh client bug
# CVE-2016-0777. More later.
# ~~ https://twitter.com/msfriedl/status/687635945642967040
UseRoaming no
# Verify SSHFP records. In case DNSSEC is used this skips the # Verify SSHFP records. In case DNSSEC is used this skips the
# question on whether you trust the fingerprint or not. # question on whether you trust the fingerprint or not.
# All my hosts run DNSSEC validating Unbound on localhost and use it # All my hosts run DNSSEC validating Unbound on localhost and use it

6
etc/ssh/ssh_config
View File

@ -40,6 +40,12 @@ Host *
# manual) # manual)
UpdateHostKeys yes UpdateHostKeys yes
# Add undocumented "UseRoaming no" to ssh_config or use
# "-oUseRoaming=no" to prevent upcoming #openssh client bug
# CVE-2016-0777. More later.
# ~~ https://twitter.com/msfriedl/status/687635945642967040
UseRoaming no
# Verify SSHFP records. In case DNSSEC is used this skips the # Verify SSHFP records. In case DNSSEC is used this skips the
# question on whether you trust the fingerprint or not. # question on whether you trust the fingerprint or not.
# All my hosts run DNSSEC validating Unbound on localhost and use it # All my hosts run DNSSEC validating Unbound on localhost and use it