From brooks@minya.sea.one-eyed-alien.net  Wed Apr 26 09:41:49 2000
Return-Path: <brooks@minya.sea.one-eyed-alien.net>
Received: from minya.sea.one-eyed-alien.net (minya.sea.one-eyed-alien.net [216.39.156.226])
	by hub.freebsd.org (Postfix) with ESMTP id E61DA37BE62
	for <FreeBSD-gnats-submit@freebsd.org>; Wed, 26 Apr 2000 09:41:47 -0700 (PDT)
	(envelope-from brooks@minya.sea.one-eyed-alien.net)
Received: (from brooks@localhost)
	by minya.sea.one-eyed-alien.net (8.9.3/8.9.3) id JAA29879;
	Wed, 26 Apr 2000 09:42:14 -0700 (PDT)
	(envelope-from brooks)
Message-Id: <200004261642.JAA29879@minya.sea.one-eyed-alien.net>
Date: Wed, 26 Apr 2000 09:42:14 -0700 (PDT)
From: brooks@one-eyed-alien.net
Sender: brooks@minya.sea.one-eyed-alien.net
Reply-To: brooks@one-eyed-alien.net
To: FreeBSD-gnats-submit@freebsd.org
Subject: The default sshd config leaves X11 forwarding off
X-Send-Pr-Version: 3.2

>Number:         18238
>Category:       conf
>Synopsis:       The default sshd config leaves X11 forwarding off
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kris
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Wed Apr 26 09:50:00 PDT 2000
>Closed-Date:    Fri Sep 22 19:50:48 PDT 2000
>Last-Modified:  Fri Sep 22 19:51:00 PDT 2000
>Originator:     Brooks Davis
>Release:        FreeBSD 5.0-CURRENT i386
>Organization:
The Aerospace Corporation
>Environment:

FreeBSD minya 5.0-CURRENT FreeBSD 5.0-CURRENT #20: Tue Apr 18 10:48:27 PDT 2000     root@minya:/usr/src/sys/compile/MINYA  i386

>Description:

The default /etc/ssh/sshd_config sets "X11Forwarding no".  As there is
no risk to the server from X11 Forwarding this is stupid.  This was
discussed on -current or -hackers a while back, but it appears no one
made the change.

>How-To-Repeat:

Install current with crypto.

>Fix:

Index: sshd_config
===================================================================
RCS file: /home/ncvs/src/crypto/openssh/sshd_config,v
retrieving revision 1.4
diff -u -r1.4 sshd_config
--- sshd_config	2000/02/26 02:24:38	1.4
+++ sshd_config	2000/04/26 16:30:47
@@ -17,7 +17,7 @@
 # Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
 #IgnoreUserKnownHosts yes
 StrictModes yes
-X11Forwarding no
+X11Forwarding yes
 X11DisplayOffset 10
 PrintMotd yes
 KeepAlive yes


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->kris 
Responsible-Changed-By: sheldonh 
Responsible-Changed-When: Thu Aug 3 02:10:09 PDT 2000 
Responsible-Changed-Why:  
Over to the maintainer (thanks, Johan). 

http://www.freebsd.org/cgi/query-pr.cgi?pr=18238 

From: Brooks Davis <brooks@one-eyed-alien.net>
To: FreeBSD-gnats-submit@FreeBSD.ORG, kris@FreeBSD.ORG
Cc:  
Subject: Re: conf/18238: The default sshd config leaves X11 forwarding off
Date: Fri, 22 Sep 2000 19:35:52 -0700

 This has been fixed in HEAD and RELENG_4 so the PR can be closed.
 
 Thanks,
 Brooks
 
 -- 
 Any statement of the form "X is the one, true Y" is FALSE.
 
State-Changed-From-To: open->closed 
State-Changed-By: kris 
State-Changed-When: Fri Sep 22 19:50:48 PDT 2000 
State-Changed-Why:  
Problem resolved. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=18238 
>Unformatted:
