I need to limit which ports can be remotely '
ssh -R' forwarded by an user.
I know about
permitopen option on authorized_keys, but as it says on man page it only limits local '
ssh -L' port forwarding
As discussed here an user would get the same with netcat or similar, but in this case user has no shell access
I also found this thread that talks about using selinux or LD_PRELOAD, but I never configured selinux before and can't find info on how to do that with LD_PRELOAD.
maybe someone have made a patch for openssh to implement that?
EDIT: I've found this bug report so I guess it's not yet implemented