swendel/nixpkgs
1
0
Fork 0
mirror of https://github.com/SebastianWendel/nixpkgs.git synced 2024-09-20 04:19:00 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #40 from falsifian/master

Browse source 
Change the default value of programs.ssh.forwardX11 to false.
This commit is contained in:
Peter Simons 2012-11-18 14:49:45 -08:00
parent 02e0d7dbc3 3afa5f86c1
commit 3dda354610
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
modules/programs/ssh.nix
View file

@ -16,11 +16,15 @@ in
programs.ssh = {
forwardX11 = mkOption {
default = cfgd.forwardX11;
default = false;
description = ''
Whether to request X11 forwarding on outgoing connections by default.
This is useful for running graphical programs on the remote machine and have them display to your local X11 server.
Historically, this value has depended on the value used by the local sshd daemon, but there really isn't a relation between the two.
Note: there are some security risks to forwarding an X11 connection.
NixOS's X server is built with the SECURITY extension, which prevents some obvious attacks.
To enable or disable forwarding on a per-connection basis, see the -X and -x options to ssh.
The -Y option to ssh enables trusted forwarding, which bypasses the SECURITY extension.
'';
};