diff options
author | glitsj16 <glitsj16@users.noreply.github.com> | 2021-01-30 00:37:01 +0000 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-01-30 00:37:01 +0000 |
commit | dbd8925fd98036647db04dcf902f5585752c8289 (patch) | |
tree | d337d510897cf1c2dc19f246e68e952d2c765af4 /etc/profile-m-z/ssh.profile | |
parent | Fix #3925 -- telegram-desktop launch browser for … (diff) | |
parent | disable-common.inc: add missing openssh paths (diff) | |
download | firejail-dbd8925fd98036647db04dcf902f5585752c8289.tar.gz firejail-dbd8925fd98036647db04dcf902f5585752c8289.tar.zst firejail-dbd8925fd98036647db04dcf902f5585752c8289.zip |
Merge pull request #3885 from kmk3/fix-ssh
ssh: Refactor, fix bugs & harden
Diffstat (limited to 'etc/profile-m-z/ssh.profile')
-rw-r--r-- | etc/profile-m-z/ssh.profile | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/etc/profile-m-z/ssh.profile b/etc/profile-m-z/ssh.profile index e3e2b4541..641c3a79d 100644 --- a/etc/profile-m-z/ssh.profile +++ b/etc/profile-m-z/ssh.profile | |||
@@ -7,13 +7,13 @@ include ssh.local | |||
7 | # Persistent global definitions | 7 | # Persistent global definitions |
8 | include globals.local | 8 | include globals.local |
9 | 9 | ||
10 | noblacklist /etc/ssh | ||
11 | noblacklist /tmp/ssh-* | ||
12 | noblacklist ${HOME}/.ssh | ||
13 | # nc can be used as ProxyCommand, e.g. when using tor | 10 | # nc can be used as ProxyCommand, e.g. when using tor |
14 | noblacklist ${PATH}/nc | 11 | noblacklist ${PATH}/nc |
15 | noblacklist ${PATH}/ncat | 12 | noblacklist ${PATH}/ncat |
16 | 13 | ||
14 | # Allow ssh (blacklisted by disable-common.inc) | ||
15 | include allow-ssh.inc | ||
16 | |||
17 | include disable-common.inc | 17 | include disable-common.inc |
18 | include disable-exec.inc | 18 | include disable-exec.inc |
19 | include disable-passwdmgr.inc | 19 | include disable-passwdmgr.inc |