shell-things/etc/ssh/sshd_config.d/anoncvs.conf
Mikaela Suomalainen 288b010fe5
sshd: move mikaela-prohibit-password.conf to broken/
Apparently OpenSSH only allows PasswordAuthentication yes within a Match
block.
2021-02-02 14:12:43 +02:00

14 lines
457 B
Plaintext

# Version Control System accounts musn't have X11Forwarding, TCP Forwarding
# or TTY. The anoncvs is usually a comment in stock sshd_config.
# The password blocking may only work in reverse so this file is partially
# useless. https://serverfault.com/a/461865 & OpenSSH_8.4p1
Match User anoncvs,git,gitea
PasswordAuthentication no
AuthenticationMethods publickey
X11Forwarding no
AllowTcpForwarding no
PermitTTY no
# ForceCommand cvs server
Match All