diff options
author | Micah Anderson <micah@riseup.net> | 2008-09-26 17:55:02 -0400 |
---|---|---|
committer | Micah Anderson <micah@riseup.net> | 2008-09-26 17:55:02 -0400 |
commit | 0b180227270cf5d1a5e2176142c2a129940f523a (patch) | |
tree | ab355003385280d8a226e0a6b05a885232aaa110 /templates/sshd_config/CentOS_normal.erb | |
parent | 58fef5f8092b937caa2a11648f3937e17f718d81 (diff) | |
download | puppet-sshd-0b180227270cf5d1a5e2176142c2a129940f523a.tar.gz puppet-sshd-0b180227270cf5d1a5e2176142c2a129940f523a.tar.bz2 |
add sshd_allow_tcp_forwarding variable, with the default changed to no (note this is opposite of
what the existing template had enabled for Debian, but this is a better setting)
Diffstat (limited to 'templates/sshd_config/CentOS_normal.erb')
-rw-r--r-- | templates/sshd_config/CentOS_normal.erb | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/templates/sshd_config/CentOS_normal.erb b/templates/sshd_config/CentOS_normal.erb index 92ba92e..a0ec786 100644 --- a/templates/sshd_config/CentOS_normal.erb +++ b/templates/sshd_config/CentOS_normal.erb @@ -140,7 +140,13 @@ UsePAM no AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT AcceptEnv LC_IDENTIFICATION LC_ALL -#AllowTcpForwarding yes + +<%- if real_sshd_tcp_forwarding.to_s == 'yes' then %> +AllowTcpForwarding yes +<%- else %> +AllowTcpForwarding no +<%- end %> + #GatewayPorts no #X11Forwarding no <%- if real_sshd_x11_forwarding.to_s == 'yes' then %> |