diff --git a/_posts/2017-11-20-hardening-openssh-all-in-one-place.md b/_posts/2017-11-20-hardening-openssh-all-in-one-place.md index 9fbf80e..26913bb 100644 --- a/_posts/2017-11-20-hardening-openssh-all-in-one-place.md +++ b/_posts/2017-11-20-hardening-openssh-all-in-one-place.md @@ -28,9 +28,6 @@ HostKey /etc/ssh/ssh_host_ed25519_key UsePrivilegeSeparation yes -KeyRegenerationInterval 3600 -ServerKeyBits 1024 - SyslogFacility AUTH LogLevel INFO @@ -44,7 +41,6 @@ PubkeyAuthentication yes PasswordAuthentication yes IgnoreRhosts yes -RhostsRSAAuthentication no HostbasedAuthentication no PermitEmptyPasswords no @@ -64,7 +60,7 @@ Subsystem sftp /usr/lib/openssh/sftp-server UseDNS yes UsePAM yes -AllowGroup ssh +AllowGroups ssh MaxAuthTries 3 KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256