Alexandre Aubin
51478d14e2
ssh_config: add conf block for sftp apps
2021-05-07 19:48:22 +02:00
Alexandre Aubin
db3cc62bc7
Add ssh.app, sftp.app groups to cover my_webapp and borg needing ssh access
2021-04-24 17:26:03 +02:00
Alexandre Aubin
eadca492f8
Merge branch 'dev' into sftp_permission
2021-04-16 17:55:54 +02:00
Kay0u
ee31969be7
add ssh port setting
2021-04-12 18:07:36 +02:00
Alexandre Aubin
b40f21458f
ssh config: indent, misc readabilty improvements
2021-03-25 16:19:40 +01:00
ljf
95eea93c4a
[fix] Remove rebase conflict blank line
2020-12-03 18:27:09 +01:00
ljf
f79b0ff0a3
[enh] SFTP and SSH permissions
2020-12-03 18:20:45 +01:00
Josué Tille
5e6bcb2346
Add possibility to restrict the user allowed to access by sftp
2020-12-03 18:17:52 +01:00
ljf (zamentur)
5923114b20
[fix] Reduce right given to ynh users with ssh ( #1050 )
...
* [fix] Avoid ynh user to be able to use X11 forwarding
* [fix] Avoid some bad situations
* [fix] Remove chroot restrictions and x11 authorization
* Update comments
Co-authored-by: Alexandre Aubin <alex.aubin@mailoo.org>
2020-09-11 20:27:40 +02:00
Alexandre Aubin
16ce8bf693
[conf] Remove deprecated option in sshd conf, c.f. https://patchwork.openembedded.org/patch/139981/
2020-07-27 19:23:07 +02:00
Alexandre Aubin
dcff10f6f8
Simplify setting usage in regenconf hooks
2019-03-22 16:31:45 +01:00
Romuald du Song
a899102efc
don't share setting for nginx and ssh
2019-02-14 22:57:24 +01:00
Romuald du Song
8e1034771a
use setting security_ciphers_compatibility to define security configurations
2019-02-04 23:01:16 +01:00
Alexandre Aubin
447372d07c
[enh] Clean + harden sshd config using Mozilla recommendation ( #590 )
...
* Clean sshd_config + harden using Mozilla recommendation
* Order of keys matter, ed25519 is recommended
2018-12-03 17:03:22 +01:00
ljf (zamentur)
847d18293a
[enh] Add other private ip network and link local
2018-11-30 15:47:42 +01:00
Alexandre Aubin
90e542a931
Allow root login on local networks
2018-11-28 21:30:26 +00:00
Alexandre Aubin
4db65682eb
Fix IPv6 handling in ssh regen conf script
2018-11-28 20:42:39 +00:00
Alexandre Aubin
3d81f032e9
Fixes following tests (some sshd_config options do not exists or are deprecated)
2018-11-28 17:50:20 +00:00
Alexandre Aubin
fad4ff090a
Use templating for more robustness about which SSH keys are enabled
2018-11-28 00:26:25 +01:00
ljf
8e0086d493
[fix] Allow user to trigger the moment when they remove dsa
2018-11-28 00:00:30 +01:00
ljf
c2b225d376
[fix] A lot of bug on the wip work on sshd migration
2018-11-27 23:59:36 +01:00
ljf (zamentur)
a194e1fa1c
[enh] Maintain ssh client connexion
2018-01-04 18:44:13 +01:00
kload
2a812e0aec
[enh] Add nslcd conf regen script
2015-09-29 06:15:01 -04:00
kload
c8dc2e324f
[enh] Bootstrap the regenconf command
2015-07-19 11:08:18 +02:00