Bug#774711: OpenSSH settings hardening

Matt Taggart <[email protected]>
Newsgroups gmane.linux.debian.devel.ssh
Message-ID <8dc81827-3e43-278e-98ea-dfe23b79da48__212.639050890573$1660781733$gmane$org@lackof.org>
Hi,

Some updates on OpenSSH config hardening

1) The ssh-audit tool that Mathew Binkley pointed out has been forked 
and updated and lives at

   https://github.com/jtesta/ssh-audit

2) The sshaudit.com site now uses the above version.

3) The sshaudit.com site also now provides a hardening guide

   https://www.ssh-audit.com/hardening_guides.html

that was inspired by the original stribika.github.io page mentioned here.

I like Mathew's idea of aiming for a config that scores well, with 
commented out configs for enabling compatibility for older clients.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.