ginzzer wrote:
> Hi there,
> I am running OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
> , I wonder if it is possible to allow only some users to have X11
> forwarding and deny the others? What to do so?
For newer versions you can do
X11Forwarding no
Match user foo
X11Forwarding yes
(or Match group x11allowed or some such.)
This feature isn't in 4.3, though.
--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
> Hi there,
> I am running OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
> , I wonder if it is possible to allow only some users to have X11
> forwarding and deny the others? What to do so?
For newer versions you can do
X11Forwarding no
Match user foo
X11Forwarding yes
(or Match group x11allowed or some such.)
This feature isn't in 4.3, though.
--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
[ reply ]