search

The-Compiler / sshtunnel

Managing of ssh tunnels via systemd
GNU General Public License v3.0
19 stars 2 forks source link

README: use cat / options #2

Closed blueyed closed 8 years ago

blueyed commented 8 years ago

For security reasons you might want to recommend using the following in ~/.ssh/authorized_keys (before the key):

command="/bin/cat",no-pty,no-X11-forwarding,no-agent-forwarding
The-Compiler commented 8 years ago

The readme already recommends creating a new user with /bin/false as the shell. What does this improve over that recommendation? (honest question, because I have no idea)

blueyed commented 8 years ago

Yes, I've noticed that, but thought that it might still be possible to run programs - which does not seem to be the case.

The command= approach seems to be necessary/useful only in case you actually want to run some program and/or the user is used not only for tunnelling.

Thanks for a nice tool, closing the issue.