sshd implementation in Go, for the sole purpose of restricting the ports that clients can request using direct-tcpip and tcpip-forward / forwarded-tcpip.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
go-sshd/TODO

9 lines
510 B

* Make sure to not run this as root (setuid doesn't work well), so use NET capabilities
* Check assertions and TODOs.
* Look if/where we want to set deadlines on open sockets
* Go through all log.Println calls, and make sure they are unique(?) and
sensible, and are not too verbose, and/or hidden behind *verbose
* FILTER for forwarded ports
* Change format of authorized_keys to allow for both forwarded and direct filtering
* Put device identifier in comments.
* Add some client identifier to log messages