Bug#774711: OpenSSH settings hardening
Matt Taggart <[email protected]>
| Newsgroups | gmane.linux.debian.devel.ssh |
|---|---|
| Message-ID | <8dc81827-3e43-278e-98ea-dfe23b79da48__212.639050890573$1660781733$gmane$org@lackof.org> |
Hi, Some updates on OpenSSH config hardening 1) The ssh-audit tool that Mathew Binkley pointed out has been forked and updated and lives at https://github.com/jtesta/ssh-audit 2) The sshaudit.com site now uses the above version. 3) The sshaudit.com site also now provides a hardening guide https://www.ssh-audit.com/hardening_guides.html that was inspired by the original stribika.github.io page mentioned here. I like Mathew's idea of aiming for a config that scores well, with commented out configs for enabling compatibility for older clients.