I've read quite a few posts regarding the use of
PermitUserEnvironment and the file
~/.ssh/environment in order to pass env variables to an ssh shell. The official sshd docs and a few other resources allude to some security risks of doing this.
Enabling environment processing may enable users to bypass access restrictions in some configurations using mechanisms such as LD_PRELOAD.
What are the likely security issue of activating
PermitUserEnvironment? I was looking to hold DB connection details in these environment variables, is this advisable?