harden sshd according to audit results
This commit is contained in:
parent
d283f2e4fd
commit
67a184fafe
|
|
@ -178,6 +178,11 @@ net.ipv6.conf.all.autoconf = 0
|
||||||
/etc/ssh/sshd_config:
|
/etc/ssh/sshd_config:
|
||||||
Port 22
|
Port 22
|
||||||
Port 2022
|
Port 2022
|
||||||
|
...
|
||||||
|
# Ciphers and keying
|
||||||
|
#RekeyLimit default none
|
||||||
|
Ciphers chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
|
||||||
|
KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue