fix(ssh_hardening): test setting kex to false, remove wrong default (#808)

Signed-off-by: Sebastian Gumprich <[email protected]>
2024-10-13 20:11:47 +02:00
1 parent 7cca65bc90
commit 141efbc516
@@ -88,9 +88,8 @@
      - aes192-ctr
      - aes128-ctr
      - aes256-cbc
-    ssh_kex:
-      - diffie-hellman-group-exchange-sha256
-      - diffie-hellman-group-exchange-sha1
+    # these should not be set in the final sshd_config
+    ssh_kex: false
    ssh_custom_options:
      - Include /etc/ssh/ssh_config.d/*
    sshd_custom_options: