environment forwarding patch for 3.4p1

Joachim Falk
Fri, 05 Jul 2002 21:06:27 -0000

I have updated my environment-forwarding patch for the
OpenSSH 3.4p1 release. It now works with privileg separation too.

With the applied patch it is possibly to forward environment
variables from the client to the server. The server will
start the user shell with the forwarded environment
variables merged with the standard environemnt provided
by the sshd daemon.

This will only work for security reasons if the user shell
is listed in /etc/shells.

The documentation is included in ssh_condfig(5) & sshd_config(5).
See ForwardEnv and EnvApproved sections.

The patch is an implementation of the method specified in
section 4.4 "Environment Variable Passing" of the IETF draft
"draft-ietf-secsh-connect-15.txt"
(http://www.snailbook.com/docs/connection.txt).

The patch is hosted on
http://home.t-online.de/home/joachim_falk/patches/index.html.

Best regards
Joachim Falk