search for: restrict_x11

...p; no_agent_forwarding_flag) + return 1; + else if ((restriction & RESTRICT_ENV) && !options.permit_user_env) + return 1; + else if ((restriction & RESTRICT_TCP) && + (!options.allow_tcp_forwarding || no_port_forwarding_flag)) + return 1; + else if ((restriction & RESTRICT_X11) && + (!options.x11_forwarding || no_x11_forwarding_flag)) + return 1; + else + return 0; +} /* * Given a template and a passwd structure, build a filename --- auth.h 28 Jan 2003 18:06:51 -0000 1.1.1.2 +++ auth.h 29 Jan 2003 20:39:19 -0000 1.3 @@ -142,6 +143,7 @@ void auth_log(A...

Hi, sorry if it is the wrong approuch to suggest improvments to OpenSSH, but here comes my suggestion: I recently stumbled upon the scponly shell which in it's chroot:ed form is an ideal solution when you want to share some files with people you trust more or less. The problem is, if you use the scponlyc as shell, port forwarding is still allowed. This can of course be dissallowed in