===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/anoncvs.shar,v
retrieving revision 1.23
retrieving revision 1.24
diff -u -r1.23 -r1.24
--- www/anoncvs.shar	2010/06/26 17:27:15	1.23
+++ www/anoncvs.shar	2012/10/16 23:09:45	1.24
@@ -87,8 +87,14 @@
 X$CVSYNCUSER.  Oh, and in case it hasn't been previously mentioned,
 X$CVSYNCUSER should *NOT* be the anoncvs user :).
 X
-XSet "PermitEmptyPasswords yes" option in /etc/ssh/sshd_config and
-Xrestart your sshd daemon.
+XAdd the following to the end of your /etc/ssh/sshd_config and restart
+Xyour sshd daemon:
+X
+XMatch User anoncvs
+X        PermitEmptyPasswords yes
+X        AllowTcpForwarding no
+X        AllowAgentForwarding no
+X        X11Forwarding no
 X
 X**********************************************************************
 XSTEP 4) Build the anoncvs user's home directory chroot jail. This