summaryrefslogtreecommitdiffstats
path: root/crypto/openssh/readconf.c
diff options
context:
space:
mode:
authorgreen <green@FreeBSD.org>2000-02-25 03:04:29 +0000
committergreen <green@FreeBSD.org>2000-02-25 03:04:29 +0000
commit83bac1a374d8526d20eeaf6783c7524b438fc73b (patch)
tree296989c3d39a2fed29bb03761b7318d0c5f0808b /crypto/openssh/readconf.c
parent129e6a7558924fd605b1352ddfa7a910dee9ee89 (diff)
downloadFreeBSD-src-83bac1a374d8526d20eeaf6783c7524b438fc73b.zip
FreeBSD-src-83bac1a374d8526d20eeaf6783c7524b438fc73b.tar.gz
Make "CheckHostIP" default to off. This was proposed on -security and
earlier IRC, but despite my inital feeling against it, this seems the more proper thing to do. Proposed by: rwatson
Diffstat (limited to 'crypto/openssh/readconf.c')
-rw-r--r--crypto/openssh/readconf.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/crypto/openssh/readconf.c b/crypto/openssh/readconf.c
index 32afcdd..b2da36f 100644
--- a/crypto/openssh/readconf.c
+++ b/crypto/openssh/readconf.c
@@ -11,6 +11,7 @@
*
* Functions for reading the configuration files.
*
+ * $FreeBSD$
*/
#include "includes.h"
@@ -670,7 +671,7 @@ fill_default_options(Options * options)
if (options->batch_mode == -1)
options->batch_mode = 0;
if (options->check_host_ip == -1)
- options->check_host_ip = 1;
+ options->check_host_ip = 0;
if (options->strict_host_key_checking == -1)
options->strict_host_key_checking = 2; /* 2 is default */
if (options->compression == -1)
OpenPOWER on IntegriCloud