Commit graph

24 commits

Author SHA1 Message Date
Alexandre Aubin
5de9e4fe6a Yolorework the repo dir structure 2021-11-10 17:56:02 +01:00
Alexandre Aubin
51478d14e2 ssh_config: add conf block for sftp apps 2021-05-07 19:48:22 +02:00
Alexandre Aubin
db3cc62bc7 Add ssh.app, sftp.app groups to cover my_webapp and borg needing ssh access 2021-04-24 17:26:03 +02:00
Alexandre Aubin
eadca492f8
Merge branch 'dev' into sftp_permission 2021-04-16 17:55:54 +02:00
Kay0u
ee31969be7
add ssh port setting 2021-04-12 18:07:36 +02:00
Alexandre Aubin
b40f21458f ssh config: indent, misc readabilty improvements 2021-03-25 16:19:40 +01:00
ljf
95eea93c4a [fix] Remove rebase conflict blank line 2020-12-03 18:27:09 +01:00
ljf
f79b0ff0a3 [enh] SFTP and SSH permissions 2020-12-03 18:20:45 +01:00
Josué Tille
5e6bcb2346 Add possibility to restrict the user allowed to access by sftp 2020-12-03 18:17:52 +01:00
ljf (zamentur)
5923114b20
[fix] Reduce right given to ynh users with ssh (#1050)
* [fix] Avoid ynh user to be able to use X11 forwarding

* [fix] Avoid some bad situations

* [fix] Remove chroot restrictions and x11 authorization

* Update comments

Co-authored-by: Alexandre Aubin <alex.aubin@mailoo.org>
2020-09-11 20:27:40 +02:00
Alexandre Aubin
16ce8bf693 [conf] Remove deprecated option in sshd conf, c.f. https://patchwork.openembedded.org/patch/139981/ 2020-07-27 19:23:07 +02:00
Alexandre Aubin
dcff10f6f8 Simplify setting usage in regenconf hooks 2019-03-22 16:31:45 +01:00
Romuald du Song
a899102efc don't share setting for nginx and ssh 2019-02-14 22:57:24 +01:00
Romuald du Song
8e1034771a use setting security_ciphers_compatibility to define security configurations 2019-02-04 23:01:16 +01:00
Alexandre Aubin
447372d07c
[enh] Clean + harden sshd config using Mozilla recommendation (#590)
* Clean sshd_config + harden using Mozilla recommendation
* Order of keys matter, ed25519 is recommended
2018-12-03 17:03:22 +01:00
ljf (zamentur)
847d18293a
[enh] Add other private ip network and link local 2018-11-30 15:47:42 +01:00
Alexandre Aubin
90e542a931 Allow root login on local networks 2018-11-28 21:30:26 +00:00
Alexandre Aubin
4db65682eb Fix IPv6 handling in ssh regen conf script 2018-11-28 20:42:39 +00:00
Alexandre Aubin
3d81f032e9 Fixes following tests (some sshd_config options do not exists or are deprecated) 2018-11-28 17:50:20 +00:00
Alexandre Aubin
fad4ff090a Use templating for more robustness about which SSH keys are enabled 2018-11-28 00:26:25 +01:00
ljf
8e0086d493 [fix] Allow user to trigger the moment when they remove dsa 2018-11-28 00:00:30 +01:00
ljf
c2b225d376 [fix] A lot of bug on the wip work on sshd migration 2018-11-27 23:59:36 +01:00
ljf (zamentur)
a194e1fa1c
[enh] Maintain ssh client connexion 2018-01-04 18:44:13 +01:00
kload
c8dc2e324f [enh] Bootstrap the regenconf command 2015-07-19 11:08:18 +02:00