Merge pull request #43 from cnotin/patch-1

sshd_config: PermitTunnel no
johanmeiring · Apr 30, 2020 · 3278676 · 3278676
2 parents 13926b1 + 01b8025
commit 3278676
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/tasks/main.yml b/tasks/main.yml
@@ -46,6 +46,7 @@
       Match Group {{ sftp_group_name }}
           ChrootDirectory %h
           AllowTCPForwarding no
+          PermitTunnel no
           X11Forwarding no
           ForceCommand internal-sftp {{ sftp_enable_logging | ternary('-l VERBOSE', '') }} {{ (sftp_start_directory in sftp_directories) | ternary('-d /' + sftp_start_directory, '') }}
           PasswordAuthentication {{ sftp_allow_passwords | ternary('yes', 'no') }}