b91d206f56
This patch hardened server configuration including removing sha1 based kex algorithms from the manifest template that puppet uses to generate the configuration file sshd_config. It also removed hardcoded sshd_config and ssh_config from repo, replaced them with patches to openssh that harden both server and client configuration. This is particularly to address the requirements that the system should be hardened from the very first boot up (before it is configured by manifest apply) It also removed old obsolete patch files in openssh directory to avoid confusions. Change-Id: Ic34bebfd88f46cade3596d920a00311f9aa5980f Signed-off-by: Andy Ning <andy.ning@windriver.com> |
||
|---|---|---|
| .. | ||
| centos | ||
| src | ||