diff options
| author | green <green@FreeBSD.org> | 2000-02-25 03:04:29 +0000 |
|---|---|---|
| committer | green <green@FreeBSD.org> | 2000-02-25 03:04:29 +0000 |
| commit | 83bac1a374d8526d20eeaf6783c7524b438fc73b (patch) | |
| tree | 296989c3d39a2fed29bb03761b7318d0c5f0808b /crypto | |
| parent | 129e6a7558924fd605b1352ddfa7a910dee9ee89 (diff) | |
| download | FreeBSD-src-83bac1a374d8526d20eeaf6783c7524b438fc73b.zip FreeBSD-src-83bac1a374d8526d20eeaf6783c7524b438fc73b.tar.gz | |
Make "CheckHostIP" default to off. This was proposed on -security and
earlier IRC, but despite my inital feeling against it, this seems
the more proper thing to do.
Proposed by: rwatson
Diffstat (limited to 'crypto')
| -rw-r--r-- | crypto/openssh/readconf.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/crypto/openssh/readconf.c b/crypto/openssh/readconf.c index 32afcdd..b2da36f 100644 --- a/crypto/openssh/readconf.c +++ b/crypto/openssh/readconf.c @@ -11,6 +11,7 @@ * * Functions for reading the configuration files. * + * $FreeBSD$ */ #include "includes.h" @@ -670,7 +671,7 @@ fill_default_options(Options * options) if (options->batch_mode == -1) options->batch_mode = 0; if (options->check_host_ip == -1) - options->check_host_ip = 1; + options->check_host_ip = 0; if (options->strict_host_key_checking == -1) options->strict_host_key_checking = 2; /* 2 is default */ if (options->compression == -1) |
