Security Related Notes → Importing Host Directory Entries

When you import host directory entries (e.g. from a CSV file, from another terminal program or from a host directory you received from someone else), ZOC asks you to confirm the import first.

The reason is that a host directory entry is more than just an address. Depending on its settings, connecting to an entry can automatically:

1. run a REXX login script, which in turn can start programs on your computer,
2. pass SSH options to the connection, e.g. a ProxyCommand that runs a local command,
3. send commands or key sequences to the remote host.

All of these are regular features, so ZOC cannot tell a useful entry from a harmful one. Therefore only import host entries from a source you trust, and check the login script, the SSH options and the remote command of imported entries before you connect to them.

If you suppressed the question with "Don't show again", you can bring it back in Options→Program Settings→Prompts/Safety.

 
← Back to Security Related Notes