sshd_config: PermitTunnel no

Restricted SFTP users don't have to create tunnels
johanmeiring · Apr 22, 2020 · 01b8025 · 01b8025
1 parent 13926b1
commit 01b8025
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/tasks/main.yml b/tasks/main.yml
@@ -46,6 +46,7 @@
       Match Group {{ sftp_group_name }}
           ChrootDirectory %h
           AllowTCPForwarding no
+          PermitTunnel no
           X11Forwarding no
           ForceCommand internal-sftp {{ sftp_enable_logging | ternary('-l VERBOSE', '') }} {{ (sftp_start_directory in sftp_directories) | ternary('-d /' + sftp_start_directory, '') }}
           PasswordAuthentication {{ sftp_allow_passwords | ternary('yes', 'no') }}