I've read quite a few posts regarding the use of PermitUserEnvironment
and the file ~/.ssh/environment
in order to pass env variables to an ssh shell. The official sshd docs and a few other resources allude to some security risks of doing this.
Enabling environment processing may enable users to bypass access restrictions in some configurations using mechanisms such as LD_PRELOAD.
What are the likely security issue of activating PermitUserEnvironment
? I was looking to hold DB connection details in these environment variables, is this advisable?
thanks