From the current man page:

PermitUserEnvironment
             Specifies whether ~/.ssh/environment and environment= options in ~/.ssh/authorized_keys are processed by sshd(8).  The default is “no”.  Enabling environment pro‐cessing may enable users to bypass access restrictions in some configurations using mechanisms such as LD_PRELOAD.

What that sounds to me like is that enabling that option weakens the security in general.

But after some googling I came across this discussion:

http://serverfault.com/questions/527638/security-risks-of-permituserenvironment-in-ssh

According to the answer, PermitUserEnvironment only weakens security for restricted accounts, such as scp-only, etc., but has no impact on full shell access accounts. If that is correct, then the man page is incomplete and misleading.

I need that option enabled, but I was hesitant to use it. I almost decided to not use it, but then I came across that discussion.

Please add a brief note to that entry in the man page, making clear that there are no security issues with that option if all accounts have full shell access (of course, assuming my interpretation is correct).

Thanks.