1 files changed, 5 insertions, 0 deletions
diff --git a/svr-x11fwd.c b/svr-x11fwd.c
index cbc8a79..7618e3b 100644
--- a/svr-x11fwd.c
+++ b/svr-x11fwd.c
@@ -33,6 +33,7 @@
 #include "channel.h"
 #include "packet.h"
 #include "buffer.h"
+#include "auth.h"
 
 #define X11BASEPORT 6000
 #define X11BINDBASE 6010
@@ -47,6 +48,10 @@ int x11req(struct ChanSess * chansess) {
 
 	int fd;
 
+	if (!svr_pubkey_allows_x11fwd()) {
+		return DROPBEAR_FAILURE;
+	}
+
 	/* we already have an x11 connection */
 	if (chansess->x11listener != NULL) {
 		return DROPBEAR_FAILURE;