summaryrefslogtreecommitdiffstats
path: root/remote/modules
diff options
context:
space:
mode:
authorSimon Rettberg2013-09-10 16:26:32 +0200
committerSimon Rettberg2013-09-10 16:26:32 +0200
commit69c4ca42ab9614808412448e7660f1323203bab6 (patch)
tree8a3eaf2850378f723fee46d3baedd43192c8c2e6 /remote/modules
parent[setup_target] Check config files for invalid variable names (diff)
downloadtm-scripts-69c4ca42ab9614808412448e7660f1323203bab6.tar.gz
tm-scripts-69c4ca42ab9614808412448e7660f1323203bab6.tar.xz
tm-scripts-69c4ca42ab9614808412448e7660f1323203bab6.zip
[sshd] Disallow ssh login for "demo" user as the password is a little easy to guess ;)
Diffstat (limited to 'remote/modules')
-rw-r--r--remote/modules/sshd/data/etc/ssh/sshd_config5
1 files changed, 5 insertions, 0 deletions
diff --git a/remote/modules/sshd/data/etc/ssh/sshd_config b/remote/modules/sshd/data/etc/ssh/sshd_config
index da9e5e01..3b7d65a6 100644
--- a/remote/modules/sshd/data/etc/ssh/sshd_config
+++ b/remote/modules/sshd/data/etc/ssh/sshd_config
@@ -85,3 +85,8 @@ Subsystem sftp /usr/lib/openssh/sftp-server
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
UsePAM yes
+
+# OpenSLX
+DenyUsers demo
+UseDNS no
+