HorlogeSkynet/blog
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Fixes a configuration entry and removes deprecated ones in OpenSSH guide

Browse Source
This commit is contained in:
Samuel FORESTIER
2018-12-11 23:04:35 +01:00
parent 7619fd365d
commit 5f90bac956
1 changed files with 1 additions and 5 deletions

6
_posts/2017-11-20-hardening-openssh-all-in-one-place.md

@ -28,9 +28,6 @@ HostKey /etc/ssh/ssh_host_ed25519_key
UsePrivilegeSeparation yes
KeyRegenerationInterval 3600
ServerKeyBits 1024
SyslogFacility AUTH
LogLevel INFO
@ -44,7 +41,6 @@ PubkeyAuthentication yes
PasswordAuthentication yes
IgnoreRhosts yes
RhostsRSAAuthentication no
HostbasedAuthentication no
PermitEmptyPasswords no
@ -64,7 +60,7 @@ Subsystem sftp /usr/lib/openssh/sftp-server
UseDNS yes
UsePAM yes
AllowGroup ssh
AllowGroups ssh
MaxAuthTries 3
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256