From e819f89ccbe6f0ddc603c91c6b706ab468c5e121 Mon Sep 17 00:00:00 2001 From: ReinerNippes Date: Mon, 30 Aug 2021 15:46:03 +0200 Subject: [PATCH] ssh_allow_tcp_forwarding is not a boolean (#480) Changed the comment to "Set to 'yes', 'no', 'local', 'all' or 'remote' to allow TCP Forwarding" --- roles/ssh_hardening/defaults/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/ssh_hardening/defaults/main.yml b/roles/ssh_hardening/defaults/main.yml index 22e21d5d..bf709d31 100644 --- a/roles/ssh_hardening/defaults/main.yml +++ b/roles/ssh_hardening/defaults/main.yml @@ -75,7 +75,7 @@ ssh_remote_hosts: [] # Set this to "without-password" or "yes" to allow root to login ssh_permit_root_login: 'no' # sshd -# false to disable TCP Forwarding. Set to true to allow TCP Forwarding. +# false to disable TCP Forwarding. Set to 'yes', 'no', 'local', 'all' or 'remote' to allow TCP Forwarding. ssh_allow_tcp_forwarding: 'no' # sshd # false to disable binding forwarded ports to non-loopback addresses. Set to true to force binding on wildcard address.