Skip to content

Commit 905fcf4

Browse files
committed
Support for Amazon Linux 2
1 parent fdd0bfc commit 905fcf4

File tree

1 file changed

+23
-0
lines changed

1 file changed

+23
-0
lines changed

roles/ssh_hardening/vars/Amazon_2.yml

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
---
2+
sshd_path: /usr/sbin/sshd
3+
ssh_host_keys_dir: '/etc/ssh'
4+
sshd_service_name: sshd
5+
ssh_owner: root
6+
ssh_group: root
7+
ssh_host_keys_owner: 'root'
8+
ssh_host_keys_group: 'ssh_keys'
9+
ssh_selinux_packages:
10+
- policycoreutils-python
11+
- checkpolicy
12+
13+
# true if SSH support Kerberos
14+
ssh_kerberos_support: true
15+
16+
# true if SSH has PAM support
17+
ssh_pam_support: true
18+
19+
sshd_moduli_file: '/etc/ssh/moduli'
20+
21+
# disable CRYPTO_POLICY to take settings from sshd configuration
22+
# see: https://access.redhat.com/solutions/4410591
23+
sshd_disable_crypto_policy: true

0 commit comments

Comments
 (0)