ssh_config,sshd_config: Minor documentation updates.

diff --git a/ssh_config b/ssh_config
index 2445a4e68bb7ad3a784636dac78d84e3f8fd4a96..4f239be572edbac120dd58546a799d8193962098 100644 (file)
--- a/ssh_config
+++ b/ssh_config
@@ -61,7 +61,9 @@ Host *
 # Allow using -M (ControlMaster) to create a master SSH session which
 # "tunnels" other connections to the same host, thus reducing the number of
 # authentications (which are relatively slow) and TCP connections. The master
-# sockets are stored in ~/.ssh (by default ControlPath is not set).
+# sockets are stored in ~/.ssh (by default ControlPath is not set). Using %r
+# (remote user name) might leak information to other users on the current
+# system (e.g. via netstat or lsof).
     ControlPath ~/.ssh/master-%l-%h-%p-%r
 # Automatically create a new master session if there's none yet or use an
 # existing one. This way the user doesn't have to use -M to enable a master

diff --git a/sshd_config b/sshd_config
index 4f54f5e4a659b02709293ebd3f18a25a20f7c1d5..fe57dc6e733a7ed9471a6ea6768bedfc4913e1ef 100644 (file)
--- a/sshd_config
+++ b/sshd_config
@@ -70,7 +70,7 @@ PermitUserEnvironment no
 # minutes.
 ClientAliveCountMax 3
 
-# Enable sftp (and sshfs) usage.
+# Enable sftp (and sshfs) usage. internal-sftp also works in chroots.
 Subsystem sftp internal-sftp