ansible-hardening/releasenotes/notes/handling-sshd-match-stanzas-fa40b97689004e46.yaml
Major Hayden 54de1b5734 Handle Match properly in sshd_config
The security role was not properly handling ssh configuration files that
have Match stanzas. This patch ensures that all added configurations
appear before the Match stanzas in the /etc/ssh/sshd_config file.

Closes-bug: 1579914

Change-Id: Ic7575490cda2bdba880e860e2e400029a84d7d45
2016-05-09 16:07:47 -05:00

8 lines
319 B
YAML

---
fixes:
- The security role now handles ``ssh_config`` files that contain
``Match`` stanzas. A marker is added to the configuration file and any new
configuration items will be added below that marker. In addition, the
configuration file is validated for each change to the ssh configuration
file.