zydronium/danwin-hosting
1
0
Fork 0
mirror of https://github.com/DanWin/hosting.git synced 2025-08-22 05:00:47 +02:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #28 from jtesta/sshd_hardening

Browse source 
Hardened SSH Service
This commit is contained in:
Daniel Winzen 2018-11-19 21:20:43 +01:00 • committed by GitHub
commit 7d032f4955
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
etc/ssh/sshd_config
View file

@ -17,7 +17,7 @@ ListenAddress ::
#HostKey /etc/ssh/ssh_host_rsa_key #HostKey /etc/ssh/ssh_host_rsa_key
#HostKey /etc/ssh/ssh_host_ecdsa_key #HostKey /etc/ssh/ssh_host_ecdsa_key
#HostKey /etc/ssh/ssh_host_ed25519_key HostKey /etc/ssh/ssh_host_ed25519_key
# Ciphers and keying # Ciphers and keying
#RekeyLimit default none #RekeyLimit default none
@ -115,6 +115,11 @@ AcceptEnv LANG LC_*
#Subsystem sftp /usr/lib/openssh/sftp-server #Subsystem sftp /usr/lib/openssh/sftp-server
Subsystem sftp internal-sftp Subsystem sftp internal-sftp
# Hardened set of key exchange, cipher, and MAC algorithms, as per <https://www.sshaudit.com/hardening_guides.html>.
KexAlgorithms curve25519-sha256@libssh.org
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128-etm@openssh.com
Match User root Match User root
AuthenticationMethods publickey AuthenticationMethods publickey