debbabi
00443de508
add ssh_pubkey_authentication variable ( #749 )
...
Signed-off-by: debbabi <[email protected]
2024-03-20 13:24:27 +01:00
Sebastian Gumprich
2db75b53c1
make it possible to configure more then yes and no for PermitTunnel ( #715 )
...
This is a breaking change, since the default variable is now a string instead of a bool
Signed-off-by: Sebastian Gumprich <[email protected]
2023-11-16 15:20:22 +01:00
Martin Schurz
7259d6b5fd
fix spelling errors
...
Signed-off-by: Martin Schurz <[email protected]
2023-04-14 23:51:53 +02:00
Cristian Baldi
7d1da63c94
Allow ssh_allow_tcp_forwarding to be a boolean ( #600 )
...
* Allow ssh_allow_tcp_forwarding to be a boolean
Signed-off-by: Cristian Baldi <[email protected] [email protected] [email protected]
2022-11-23 13:45:01 +01:00
Dennis Eriksen
681898bd96
OpenBSD does not support GSSAPIAuthentication
...
... and freaks out when it is mentioned in the config files. So let's
just remove the GSSAPI-stuff.
Signed-off-by: Dennis Eriksen <[email protected]
2022-11-08 09:12:18 +01:00
Sebastian Gumprich
4ca4f09453
Cleanup old OS-support and simplify vars ( #458 )
...
* use os_family instead of distribution for debian systems
Signed-off-by: rndmh3ro <[email protected] [email protected]
2021-06-30 13:09:46 +02:00
alimli and Haldun ALIMLI
4f42e0d396
ssh_allow_tcp_forwarding remote option added ( #447 )
...
Signed-off-by: Haldun ALIMLI <[email protected] [email protected]
2021-04-30 14:49:42 +02:00
Maximilian Praeger
4399d3f885
removed: unneccessary conditional
...
Signed-off-by: Maximilian Praeger <[email protected]
2021-01-22 07:24:54 +01:00
Maximilian Praeger
6b55b9619c
added: comment for HostCertificate
...
Signed-off-by: Maximilian Praeger <[email protected]
2021-01-22 07:24:54 +01:00
Maximilian Praeger
8f7bae533c
fixed: add empty line after HostCertificate loop
...
Signed-off-by: Maximilian Praeger <[email protected]
2021-01-22 07:24:54 +01:00
Maximilian Praeger
6e9247bde3
added: support for HostCertificate in sshd conf file
...
Signed-off-by: Maximilian Praeger <[email protected]
2021-01-22 07:24:53 +01:00
Martin Schurz
0600cdae75
add "role" to comment
...
Signed-off-by: Martin Schurz <[email protected]
2021-01-20 11:23:40 +01:00
Farid Joubbi
254b62d980
Added comment on top of template about which role modified the resulting file. https://github.com/dev-sec/ansible-collection-hardening/issues/345
...
Signed-off-by: Farid Joubbi <[email protected]
2021-01-19 14:05:33 +01:00
Farid Joubbi
83e29b01f5
Removed Protocol statement in later versions of sshd, since the code … ( #342 )
...
* Removed Protocol statement in later versions of sshd, since the code for SSH-1 has been removed in sshd.
Signed-off-by: Farid Joubbi <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2020-12-16 19:29:33 +01:00
Farid Joubbi
91424ac209
Improvements of comments in opensshd.conf.j2 #338 ( #339 )
...
* Fixed some comments that had issues. See #338
* Cut some long comments into two rows for easier reading.
Signed-off-by: joubbi <[email protected]
2020-12-12 20:35:38 +01:00
Sebastian Gumprich
a46642ee92
merge ssh-hardening role into collection
2020-11-07 21:46:45 +01:00
debbabi