summaryrefslogtreecommitdiffstats
path: root/remote/modules
diff options
context:
space:
mode:
authorSimon Rettberg2013-09-10 16:26:32 +0200
committerSimon Rettberg2013-09-10 16:26:32 +0200
commit755e1948be5393cc6fa9224c805f8b8b098e7553 (patch)
tree0f3746800bdf49f92f78595799da10d9c4c0b34d /remote/modules
parent[setup_target] Check config files for invalid variable names (diff)
downloadtm-scripts-755e1948be5393cc6fa9224c805f8b8b098e7553.tar.gz
tm-scripts-755e1948be5393cc6fa9224c805f8b8b098e7553.tar.xz
tm-scripts-755e1948be5393cc6fa9224c805f8b8b098e7553.zip
[sshd] Disallow ssh login for "demo" user as the password is a little easy to guess ;)
Diffstat (limited to 'remote/modules')
-rw-r--r--remote/modules/sshd/data/etc/ssh/sshd_config5
1 files changed, 5 insertions, 0 deletions
diff --git a/remote/modules/sshd/data/etc/ssh/sshd_config b/remote/modules/sshd/data/etc/ssh/sshd_config
index da9e5e01..3b7d65a6 100644
--- a/remote/modules/sshd/data/etc/ssh/sshd_config
+++ b/remote/modules/sshd/data/etc/ssh/sshd_config
@@ -85,3 +85,8 @@ Subsystem sftp /usr/lib/openssh/sftp-server
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
UsePAM yes
+
+# OpenSLX
+DenyUsers demo
+UseDNS no
+