An XCCDF Rule
AllowTcpForwarding
/etc/ssh/sshd_config.d/00-complianceascode-hardening.conf
AllowTcpForwarding no