andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

change default to allow SFTP (#564)

Browse Source 
* change default to allow SFTP

Signed-off-by: Martin Schurz <[email protected]>

* add documentation

Signed-off-by: Martin Schurz <[email protected]>

* diasble sftp for default tests

Signed-off-by: Martin Schurz <[email protected]>

* extend documentation

Signed-off-by: Martin Schurz <[email protected]>

* fix typo

Signed-off-by: Martin Schurz <[email protected]>

* correct ssh version

Signed-off-by: Martin Schurz <[email protected]>

Signed-off-by: Martin Schurz <[email protected]>
This commit is contained in:
schurzi authored and GitHub committed 2022-08-22 10:03:37 +02:00
1 parent 5e220525cb
commit c1cd6c5ac3
4 files changed
+10 -5
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

roles/ssh_hardening/defaults/main.yml
+2 -2
View File
@@ -158,8 +158,8 @@ ssh_banner_path: '/etc/ssh/banner.txt'
# false to disable distribution version leakage during initial protocol handshake
ssh_print_debian_banner: false # sshd (Debian OS family only)
# true to enable sftp configuration
sftp_enabled: false
# false to disable sftp configuration
sftp_enabled: true
# false to disable sftp chroot
sftp_chroot: true