sshd_config: add commented AcceptEnv

and reason why it's commented, security, ShellShock worked with remotely sent environent variables even with restricted accounts.
2015-09-06 07:33:32 +03:00 · 2015-09-06 07:33:32 +03:00 · c3f351d21f
parent 90c86466dd
commit c3f351d21f
1 changed files with 4 additions and 0 deletions
--- a/etc/ssh/sshd_config
+++ b/etc/ssh/sshd_config
@ -25,6 +25,10 @@ HostKey /etc/ssh/ssh_host_rsa_key
 ## Debian
 #Subsystem sftp /usr/lib/openssh/sftp-server

+# Nothing is Accepted for security reasons, e.g. shellshock worked with
+# remotely accepted environment variables.
+#AcceptEnv LANG LANGUAGE LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT LC_IDENTIFICATION
+
 # Logging
 LogLevel VERBOSE