Replace ssh_keys group in Fedora with root (#677)

0 Fork 0

* Replace ssh_keys group in Fedora with root

In Fedora 38, the `ssh_keys` group was removed. root is used now, in accordance to upstream.

See: https://www.spinics.net/lists/fedora-devel/msg307707.html
See: https://src.fedoraproject.org/rpms/openssh/pull-request/37#

Signed-off-by: Sebastian Gumprich <[email protected]>

* change host key mode and owner in fedora and rhel9

Signed-off-by: Sebastian Gumprich <[email protected]>

* add missing host mode for rhel7

Signed-off-by: Sebastian Gumprich <[email protected]>

* harden all ssh host keys

Signed-off-by: Sebastian Gumprich <[email protected]>

* skip linting rule

Signed-off-by: Sebastian Gumprich <[email protected]>

* correct grp for bsd is wheel

Signed-off-by: Sebastian Gumprich <[email protected]>

---------

Signed-off-by: Sebastian Gumprich <[email protected]>

This commit is contained in:

Sebastian Gumprich authored and

GitHub committed 2023-06-10 08:04:04 +02:00

1 parent 0e173b4165

commit f56d80b5d8

13 files changed

+52 -17

No files matched your search

									
										roles/ssh_hardening/vars/FreeBSD.yml
									
		+2
		-1
	
												View File
												
				@@ -5,7 +5,8 @@ sshd_service_name: sshd

				ssh_owner: root

				ssh_group: wheel

				ssh_host_keys_owner: root

				ssh_host_keys_group: root

				ssh_host_keys_group: wheel

				ssh_host_keys_mode: "0600"

				# true if SSH support Kerberos

				ssh_kerberos_support: true