Tak proc je to zbytecne jsem z clanku tedy nepochopil. Shell pristup totiz neni zdaleka jedina podminka, aspon v uvedenem provedeni. Spis je hlavni podminkou dosti, rekneme, liberalni admin, kdyz uz nechci predpokladat nic horsiho.
BTW tento skvely „exploit“ byl napsan po precteni manualove stranky k OpenSSH?
AllowTcpForwarding
Specifies whether TCP forwarding is permitted. The default is
``yes''. Note that disabling TCP forwarding does not improve se-
curity unless users are also denied shell access, as they can al-
ways install their own forwarders.