openstack/ansible-hardening
Code Issues Proposed changes

Disable UsePriviledgeSeparation directive for sshd

Browse Source 
This was deprecated a long time ago in openssh-server 7.4 and has
been generating warnings in the log file ever since.

Change-Id: Ic3f7afadcaa875e6ce871c0ce36b4b11f10a7044
This commit is contained in:
Jonathan Rosser 2023-03-16 14:58:35 +00:00
parent e77c311442
commit a07f0c5a9d
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -355,7 +355,7 @@ security_sshd_disallow_gssapi: yes # V-72259
# Disallow compression or delay after login.
security_sshd_compression: 'delayed' # V-72267
# Require privilege separation at every opportunity.
security_sshd_enable_privilege_separation: yes # V-72265
security_sshd_enable_privilege_separation: no # V-72265
# Require strict mode checking of home directory configuration files.
security_sshd_enable_strict_modes: yes # V-72263
# Disallow Kerberos authentication.