Aminda Suomalainen
7ad17f8087
sshd/user-permit-password.conf: note on how to allow specific user to use passwords
2021-02-01 17:11:06 +02:00
Aminda Suomalainen
1503367c86
sshd_config & ….d/README: note min version & date
2021-01-31 13:51:06 +02:00
Aminda Suomalainen
f75bc7bd07
sshd/basic-security.conf: remove deprecated option
...
> /etc/ssh/sshd_config.d/basic-security.conf line 24: Deprecated option UsePrivilegeSeparation
OpenSSH_8.4p1, OpenSSL 1.1.1i FIPS 8 Dec 2020
2021-01-31 13:39:51 +02:00
Aminda Suomalainen
0151bee9b0
sshd/mikaela-prohibit-password.conf: add AuthenticationMethods publickey
2021-01-30 22:15:51 +02:00
Aminda Suomalainen
f1ea1e17d9
etc/ssh: rm copy
2021-01-30 21:35:05 +02:00
Aminda Suomalainen
0572613d99
etc/ssh: cut sshd_config into multiple .confs
2021-01-30 21:31:38 +02:00
Aminda Suomalainen
c5fa3daf29
sshd_config.d: read Mozilla docs & adjust accordingly
...
https://infosec.mozilla.org/guidelines/openssh
2021-01-30 21:18:41 +02:00
Aminda Suomalainen
5211fb772c
sshd_config.d: add anoncvs.conf
2021-01-30 21:00:06 +02:00
Aminda Suomalainen
de3a0739b4
sshd_config.d: add mikaela-prohibit-password.conf
...
Resolves : #88
2021-01-30 20:50:21 +02:00
Aminda Suomalainen
a7c643bb7a
etc/sshd_config.d: add basic-security.conf
...
Ref: 88
2021-01-30 20:47:21 +02:00
Mikaela Suomalainen
856085bd74
ssh_config: document ForwardAgent and ForwardX11...
...
...Previously they were no without explanation, but it never hurts to
explicitly have comments on not doing that, I didn't quickly find
anything nice for ForwardAgent, but I remember the Matrix.org people
somehow avoiding hearing it and ForwardX11 first result was that
StackExchange.
2020-05-22 14:36:26 +03:00
Mikaela Suomalainen
d8d48508bd
ssh_config: update comments, add Includes
...
Resolves : #69
2020-05-22 14:29:37 +03:00
Aminda Suomalainen
95bcf095df
VerifyHostKeyByDNS is supposed to be yes
...
fix previous commit, I imagine I changed it by accident.
2019-05-11 00:58:00 +03:00
Aminda Suomalainen
e634ee8863
ssh_config: update comment for VerifyHostKeyDNS
...
OpenSSH is evil and gives you three not-optimal options to this:
A) trust DNSSEC and don't write known_hosts
B) ask whether to trust DNS, but don't bother telling me if it's signed
C) don't even check SSHFP
I see A) as the least evil, but I wish known_hosts was written.
Alternatively B) should tell me whether there is DNSSEC or not, not
only "matching keys found from DNS" or whatever it says always.
2019-05-09 18:44:36 +03:00
Aminda Suomalainen
492cac7158
Revert "ssh_config: controlpersist auto instead of on"
...
This reverts commit 330e8a80ad
.
I got complaining about bad value
2018-10-11 13:45:31 +03:00
Aminda Suomalainen
330e8a80ad
ssh_config: controlpersist auto instead of on
...
just in case that would be used for tracking and hoping that SSH is
clever enough.
2018-10-07 21:12:08 +03:00
Aminda Suomalainen
b8bda9cf49
ssh_config: use more private ControlPath
2018-10-07 20:54:41 +03:00
Aminda Suomalainen
9a662594d2
Fix #87 (explain ssh_config UseRoaming no)
2016-01-14 20:37:51 +02:00
Aminda Suomalainen
bbfb63dabd
unify the two ssh_config files (fix typos)
2016-01-14 16:59:18 +02:00
Aminda Suomalainen
9d5db7ee3c
ssh_config: add "UseRoaming no"
...
https://twitter.com/msfriedl/status/687635945642967040
2016-01-14 16:47:30 +02:00
Aminda Suomalainen
d903ba5985
sshd_config: no instead of No
...
Permitrootlogin had it for some reason and Jolla's sshd didn't like it.
2016-01-06 10:17:33 +02:00
Aminda Suomalainen
c42ae8eb43
ssh: also send EDITOR
2015-09-12 11:45:42 +03:00
Aminda Suomalainen
fdf8255372
ssh: send/accept also TZ TERM
2015-09-12 11:42:44 +03:00
Aminda Suomalainen
0f00443a7b
sshd_config: mention the LC_ALL anyway
...
my config files are horrible, too many comments.
2015-09-06 18:42:36 +03:00
Aminda Suomalainen
96ca38818f
sshd_config: don't talk so much about locales
2015-09-06 18:40:02 +03:00
Aminda Suomalainen
801e3e0941
sshd_config: AcceptEnv LANG, LANGUAGE LC_*
...
but not LC_ALL and there is no asterisk, the varibles are allowed
separately. It's very unlikely that someone invents a new locale type.
2015-09-06 18:36:48 +03:00
Aminda Suomalainen
a3d5fbd9d7
sshd_config: http://serverfault.com/a/660325
2015-09-06 18:27:50 +03:00
Aminda Suomalainen
a0352630fd
sshd_config: verbose logging of sftp
2015-09-06 17:37:34 +03:00
Aminda Suomalainen
8d55bc53db
sshd_config: use internal sftp & fixes
...
thanks again @grawity
2015-09-06 17:20:12 +03:00
Aminda Suomalainen
c82b706942
fix 7470403158
...
thanks @DarthGandalf and @grawity on #znc
2015-09-06 17:13:21 +03:00
Aminda Suomalainen
7470403158
sshd_config: add Fedora & Gentoo sftp-server
...
thanks Conjuro and @DarthGandalf on #znc
2015-09-06 17:09:55 +03:00
Aminda Suomalainen
774346c8d0
fix sshd_config
2015-09-06 08:42:29 +03:00
Aminda Suomalainen
68c6da5aec
ssh_config: fix comments
2015-09-06 08:15:17 +03:00
Aminda Suomalainen
dc9f8b0ab5
sort sshd_config
2015-09-06 08:12:41 +03:00
Aminda Suomalainen
c3f351d21f
sshd_config: add commented AcceptEnv
...
and reason why it's commented, security, ShellShock worked with remotely
sent environent variables even with restricted accounts.
2015-09-06 07:33:32 +03:00
Aminda Suomalainen
90c86466dd
ssh_config: also sendenv LANGUAGE
2015-09-06 07:30:41 +03:00
Aminda Suomalainen
6fc4b6a29b
ssh_config: add missing dot
2015-09-05 23:50:31 +03:00
Aminda Suomalainen
28c2f0b8d8
ssh_config: SendEnv LANG LC_*
2015-09-05 23:46:00 +03:00
Aminda Suomalainen
bd3ee60e61
ssh_config: fix paste fail
2015-09-02 08:33:02 +03:00
Aminda Suomalainen
66f604a6dd
ssh_config: add UpdateHostKeys yes
2015-09-02 08:15:16 +03:00
Aminda Suomalainen
c05b52354f
sshd_config: restore Client*
...
I am sure I committed them already, but they have disappeared somewhere.
Maybe I accidentally overwrote them.
2015-09-01 17:37:33 +03:00
Aminda Suomalainen
888686ef48
etc/ssh/copy: add verbosity
2015-09-01 17:32:56 +03:00
Aminda Suomalainen
c2c0c4fa08
etc/ssh: add copy script
2015-09-01 17:31:42 +03:00
Aminda Suomalainen
25bf96e30a
ssh_config: my ssh key is not system-wide
2015-09-01 17:16:37 +03:00
Aminda Suomalainen
96dfc06668
ssh_config: remove unrelated comments
2015-09-01 17:06:33 +03:00
Aminda Suomalainen
defa0b9df1
etc/ssh: add ssh_config
2015-09-01 16:48:27 +03:00
Aminda Suomalainen
4cdf8dfe71
sshd_config: add ClientAliveCountMax ClientAliveInterval
2015-09-01 16:40:56 +03:00
Aminda Suomalainen
73e9e99d9c
sshd_config: cleaning up
2015-08-30 16:54:21 +03:00
Aminda Suomalainen
c922d0aa37
etc/ssh/sshd_config: fix banner
2015-08-28 19:25:26 +03:00
Aminda Suomalainen
7e4bbfba5a
sshd_config: also remove ecdsa keys
2015-08-28 14:29:34 +03:00