We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 311cf40 + 157832e commit f144605Copy full SHA for f144605
roles/ssh_hardening/vars/RedHat_10.yml
@@ -0,0 +1,26 @@
1
+---
2
+ssh_pkgs:
3
+ - openssh
4
+sshd_path: /usr/sbin/sshd
5
+ssh_host_keys_dir: /etc/ssh
6
+sshd_service_name: sshd
7
+ssh_owner: root
8
+ssh_group: root
9
+ssh_host_keys_owner: root
10
+ssh_host_keys_group: root
11
+ssh_host_keys_mode: "0600"
12
+ssh_selinux_packages:
13
+ - policycoreutils-python-utils
14
+ - checkpolicy
15
+
16
+# true if SSH support Kerberos
17
+ssh_kerberos_support: true
18
19
+# true if SSH has PAM support
20
+ssh_pam_support: true
21
22
+sshd_moduli_file: /etc/ssh/moduli
23
24
+# disable CRYPTO_POLICY to take settings from sshd configuration
25
+# see: https://access.redhat.com/solutions/4410591
26
+sshd_disable_crypto_policy: true
0 commit comments