summaryrefslogtreecommitdiffstats
path: root/remote/modules/sshd
diff options
context:
space:
mode:
authorSimon Rettberg2013-09-10 16:26:32 +0200
committerJonathan Bauer2013-09-30 13:22:06 +0200
commitf5e96dc47824c23b64ac835595ebaa03cfc4fc4a (patch)
treee50b09abb5689fa17f6dc2e2587a6939c3ff9081 /remote/modules/sshd
parent[system.inc] LIB64 depending on SYS_DISTRIBUTION now perror, not pwarning. (diff)
downloadtm-scripts-f5e96dc47824c23b64ac835595ebaa03cfc4fc4a.tar.gz
tm-scripts-f5e96dc47824c23b64ac835595ebaa03cfc4fc4a.tar.xz
tm-scripts-f5e96dc47824c23b64ac835595ebaa03cfc4fc4a.zip
[sshd] Disallow ssh login for "demo" user as the password is a little easy to guess ;)
Diffstat (limited to 'remote/modules/sshd')
-rw-r--r--remote/modules/sshd/data/etc/ssh/sshd_config5
1 files changed, 5 insertions, 0 deletions
diff --git a/remote/modules/sshd/data/etc/ssh/sshd_config b/remote/modules/sshd/data/etc/ssh/sshd_config
index da9e5e01..3b7d65a6 100644
--- a/remote/modules/sshd/data/etc/ssh/sshd_config
+++ b/remote/modules/sshd/data/etc/ssh/sshd_config
@@ -85,3 +85,8 @@ Subsystem sftp /usr/lib/openssh/sftp-server
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
UsePAM yes
+
+# OpenSLX
+DenyUsers demo
+UseDNS no
+