14 lines
459 B
Plaintext
14 lines
459 B
Plaintext
# Version Control System accounts must not have X11Forwarding, TCP
|
|
# Forwarding or TTY. The anoncvs is usually a comment in stock sshd_config.
|
|
# The password blocking may only work in reverse so this file is partially
|
|
# useless. https://serverfault.com/a/461865 & OpenSSH_8.4p1
|
|
|
|
Match User anoncvs,git,gitea
|
|
PasswordAuthentication no
|
|
AuthenticationMethods publickey
|
|
X11Forwarding no
|
|
AllowTcpForwarding no
|
|
PermitTTY no
|
|
# ForceCommand cvs server
|
|
Match All
|