How can an SSH command be setup to allow port forwarding but not execute commands.
I know that the ssh login can use -N to stop commands executing, but can the ssh config file be setup to disallow it?
Restricting the type of shell and the path in Linux is on option, but can it be done in the SSH configuration itself?