diff options
author | nik <nik@FreeBSD.org> | 2000-04-30 22:41:58 +0000 |
---|---|---|
committer | nik <nik@FreeBSD.org> | 2000-04-30 22:41:58 +0000 |
commit | b8783e88c423241825d27b63c06f09f6ef55f7ef (patch) | |
tree | 3c9e078bc3c087a5fba05981bfed66dfd3776199 /crypto | |
parent | 6c88ac1d5081e258886157114878adfeaeb5f348 (diff) | |
download | FreeBSD-src-b8783e88c423241825d27b63c06f09f6ef55f7ef.zip FreeBSD-src-b8783e88c423241825d27b63c06f09f6ef55f7ef.tar.gz |
Note that X11 Forwarding is off by default.
PR: docs/17566
Submitted by: Keith Stevenson <ktstev01@louisville.edu>
Diffstat (limited to 'crypto')
-rw-r--r-- | crypto/openssh/ssh.1 | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/crypto/openssh/ssh.1 b/crypto/openssh/ssh.1 index caee364..4f46288 100644 --- a/crypto/openssh/ssh.1 +++ b/crypto/openssh/ssh.1 @@ -222,15 +222,16 @@ of .Pp If the user is using X11 (the .Ev DISPLAY -environment variable is set), the connection to the X11 display is -automatically forwarded to the remote side in such a way that any X11 +environment variable is set), the connection to the X11 display can +be forwarded to the remote side in such a way that any X11 programs started from the shell (or command) will go through the encrypted channel, and the connection to the real X server will be made from the local machine. The user should not manually set .Ev DISPLAY . -Forwarding of X11 connections can be -configured on the command line or in configuration files. +Forwarding of X11 connections weakens the security of ssh and is +disabled by default. X11 forwarding can be enabled on the command line +or in configuration files. .Pp The .Ev DISPLAY |