titanz/Fedora-CoreOS-Ignition
1
0
Fork 0
mirror of https://github.com/TommyTran732/Fedora-CoreOS-Ignition.git synced 2025-11-04 11:08:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update SSH Hardening

Browse Source 
Signed-off-by: Thien Tran <contact@tommytran.io>
This commit is contained in:
Thien Tran
2023-10-10 12:05:22 -07:00
parent 3ffaeccc7f
commit a99d1f5e1d
4 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Docker-Compose.ign
View File

@@ -50,7 +50,7 @@
"path": "/etc/ssh/sshd_config.d/10-custom.conf",
"contents": {
"compression": "",
"source": "data:,X11Forwarding%20no%0AGSSAPIAuthentication%20no%0A"
"source": "data:,X11Forwarding%20no%0AHostKeyAlgorithms%20ssh-ed25519%0APubkeyAcceptedKeyTypes%20ssh-ed25519%0ACiphers%20aes256-gcm%40openssh.com%0AMACs%20-*%0AKerberosAuthentication%20no%0AGSSAPIAuthentication%20no%0A"
}
},
{

5
Docker-Compose.yml
View File

@@ -105,6 +105,11 @@ storage:
contents:
inline: |
X11Forwarding no
HostKeyAlgorithms ssh-ed25519
PubkeyAcceptedKeyTypes ssh-ed25519
Ciphers aes256-gcm@openssh.com
MACs -*
KerberosAuthentication no
GSSAPIAuthentication no
- path: /etc/zincati/config.d/51-rollout-wariness.toml
contents:

2
Generic.ign
View File

@@ -50,7 +50,7 @@
"path": "/etc/ssh/sshd_config.d/10-custom.conf",
"contents": {
"compression": "",
"source": "data:,X11Forwarding%20no%0AGSSAPIAuthentication%20no%0A"
"source": "data:,X11Forwarding%20no%0AHostKeyAlgorithms%20ssh-ed25519%0APubkeyAcceptedKeyTypes%20ssh-ed25519%0ACiphers%20aes256-gcm%40openssh.com%0AMACs%20-*%0AKerberosAuthentication%20no%0AGSSAPIAuthentication%20no%0A"
}
},
{

5
Generic.yml
View File

@@ -123,6 +123,11 @@ storage:
contents:
inline: |
X11Forwarding no
HostKeyAlgorithms ssh-ed25519
PubkeyAcceptedKeyTypes ssh-ed25519
Ciphers aes256-gcm@openssh.com
MACs -*
KerberosAuthentication no
GSSAPIAuthentication no
- path: /etc/zincati/config.d/51-rollout-wariness.toml
contents: