From a73cd54d403b2ab7588a7393c6b62400ae4a3fde Mon Sep 17 00:00:00 2001 From: Mathieu GELI Date: Thu, 14 Jan 2021 11:47:19 +0100 Subject: [PATCH] Specify exact version of wetty disabling the /wetty/ssh/ feature --- docs/apache.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/apache.md b/docs/apache.md index 8c22b3a..7ef5dcb 100644 --- a/docs/apache.md +++ b/docs/apache.md @@ -153,7 +153,7 @@ You probably don't want local users to impersonate each other, for that you need 3. Validate your wetty version does not allow access to `/wetty/ssh/` else again you will be able to impersonnate anyone: provided by either: - 1. a recent wetty commit disabling it in case of `remote-user` + 1. wetty version 2.0.3 and beyond implements this by disabling this feature in case of `remote-user` presence 2. apache2 conf as provided in previous section (containing the ``)