summaryrefslogtreecommitdiffstats
path: root/crypto/openssh/ssh.1
diff options
context:
space:
mode:
authornik <nik@FreeBSD.org>2000-04-30 22:41:58 +0000
committernik <nik@FreeBSD.org>2000-04-30 22:41:58 +0000
commitb8783e88c423241825d27b63c06f09f6ef55f7ef (patch)
tree3c9e078bc3c087a5fba05981bfed66dfd3776199 /crypto/openssh/ssh.1
parent6c88ac1d5081e258886157114878adfeaeb5f348 (diff)
downloadFreeBSD-src-b8783e88c423241825d27b63c06f09f6ef55f7ef.zip
FreeBSD-src-b8783e88c423241825d27b63c06f09f6ef55f7ef.tar.gz
Note that X11 Forwarding is off by default.
PR: docs/17566 Submitted by: Keith Stevenson <ktstev01@louisville.edu>
Diffstat (limited to 'crypto/openssh/ssh.1')
-rw-r--r--crypto/openssh/ssh.19
1 files changed, 5 insertions, 4 deletions
diff --git a/crypto/openssh/ssh.1 b/crypto/openssh/ssh.1
index caee364..4f46288 100644
--- a/crypto/openssh/ssh.1
+++ b/crypto/openssh/ssh.1
@@ -222,15 +222,16 @@ of
.Pp
If the user is using X11 (the
.Ev DISPLAY
-environment variable is set), the connection to the X11 display is
-automatically forwarded to the remote side in such a way that any X11
+environment variable is set), the connection to the X11 display can
+be forwarded to the remote side in such a way that any X11
programs started from the shell (or command) will go through the
encrypted channel, and the connection to the real X server will be made
from the local machine.
The user should not manually set
.Ev DISPLAY .
-Forwarding of X11 connections can be
-configured on the command line or in configuration files.
+Forwarding of X11 connections weakens the security of ssh and is
+disabled by default. X11 forwarding can be enabled on the command line
+or in configuration files.
.Pp
The
.Ev DISPLAY
OpenPOWER on IntegriCloud