diff -Naur openssh-5.1p1/ssh_config openssh-5.1p1.oden/ssh_config --- openssh-5.1p1/ssh_config 2007-06-11 06:04:42.000000000 +0200 +++ openssh-5.1p1.oden/ssh_config 2008-07-22 12:06:08.000000000 +0200 @@ -43,3 +43,17 @@ # Tunnel no # TunnelDevice any:any # PermitLocalCommand no + +Host * + ForwardX11 yes + Protocol 2,1 + + # If this option is set to yes then remote X11 clients will have full access + # to the original X11 display. As virtually no X11 client supports the untrusted + # mode correctly we set this to yes. + ForwardX11Trusted yes + + # Send locale-related environment variables + #SendEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES + #SendEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT + #SendEnv LC_IDENTIFICATION LC_ALL diff -Naur openssh-5.1p1/sshd_config openssh-5.1p1.oden/sshd_config --- openssh-5.1p1/sshd_config 2008-07-02 14:35:43.000000000 +0200 +++ openssh-5.1p1.oden/sshd_config 2008-07-22 12:07:44.000000000 +0200 @@ -3,7 +3,7 @@ # This is the sshd server system-wide configuration file. See # sshd_config(5) for more information. -# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin +# This sshd was compiled with PATH=_OPENSSH_PATH_ # The strategy used for options in the default sshd_config shipped with # OpenSSH is to specify options with their default value where @@ -21,10 +21,10 @@ Protocol 2 # HostKey for protocol version 1 -#HostKey /etc/ssh/ssh_host_key +HostKey /etc/ssh/ssh_host_key # HostKeys for protocol version 2 -#HostKey /etc/ssh/ssh_host_rsa_key -#HostKey /etc/ssh/ssh_host_dsa_key +HostKey /etc/ssh/ssh_host_rsa_key +HostKey /etc/ssh/ssh_host_dsa_key # Lifetime and size of ephemeral version 1 server key #KeyRegenerationInterval 1h @@ -38,7 +38,7 @@ # Authentication: #LoginGraceTime 2m -#PermitRootLogin yes +PermitRootLogin no #StrictModes yes #MaxAuthTries 6 #MaxSessions 10 @@ -85,17 +85,22 @@ # and ChallengeResponseAuthentication to 'no'. #UsePAM no +# Accept locale-related environment variables +AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES +AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT +AcceptEnv LC_IDENTIFICATION LC_ALL + #AllowAgentForwarding yes #AllowTcpForwarding yes #GatewayPorts no -#X11Forwarding no +X11Forwarding yes #X11DisplayOffset 10 #X11UseLocalhost yes #PrintMotd yes #PrintLastLog yes #TCPKeepAlive yes #UseLogin no -#UsePrivilegeSeparation yes +UsePrivilegeSeparation yes #PermitUserEnvironment no #Compression delayed #ClientAliveInterval 0
