|
 |
575137 |
From 5018939a4e526250ded2053adb9c4f286e497077 Mon Sep 17 00:00:00 2001
|
|
|
575137 |
From: =?UTF-8?q?Mat=C4=9Bj=20T=C3=BD=C4=8D?= <matyc@redhat.com>
|
|
|
575137 |
Date: Tue, 8 Jan 2019 18:11:14 +0100
|
|
|
575137 |
Subject: [PATCH] Remove the sshd_disable_rhosts_rsa rule from RHEL8 and Fedora
|
|
|
575137 |
profiles.
|
|
|
575137 |
|
|
|
575137 |
The rule references a sshd configuration option that is not relevant for up-to-date RHEL>=7 systems.
|
|
|
575137 |
---
|
|
|
575137 |
fedora/profiles/ospp.profile | 1 -
|
|
|
575137 |
rhel8/profiles/hipaa.profile | 1 -
|
|
|
575137 |
rhel8/profiles/ospp.profile | 1 -
|
|
|
575137 |
3 files changed, 3 deletions(-)
|
|
|
575137 |
|
|
|
575137 |
diff --git a/fedora/profiles/ospp.profile b/fedora/profiles/ospp.profile
|
|
|
575137 |
index f6c3023e6b..4389b6d438 100644
|
|
|
575137 |
--- a/fedora/profiles/ospp.profile
|
|
|
575137 |
+++ b/fedora/profiles/ospp.profile
|
|
|
575137 |
@@ -72,7 +72,6 @@ selections:
|
|
|
575137 |
- disable_host_auth
|
|
|
575137 |
- sshd_disable_gssapi_auth
|
|
|
575137 |
- sshd_disable_kerb_auth
|
|
|
575137 |
- - sshd_disable_rhosts_rsa
|
|
|
575137 |
- sshd_disable_rhosts
|
|
|
575137 |
- sshd_disable_user_known_hosts
|
|
|
575137 |
- var_accounts_passwords_pam_faillock_deny=3
|
|
|
575137 |
diff --git a/rhel8/profiles/hipaa.profile b/rhel8/profiles/hipaa.profile
|
|
|
575137 |
index feb98007cf..48fd03b46d 100644
|
|
|
575137 |
--- a/rhel8/profiles/hipaa.profile
|
|
|
575137 |
+++ b/rhel8/profiles/hipaa.profile
|
|
|
575137 |
@@ -57,7 +57,6 @@ selections:
|
|
|
575137 |
- sshd_disable_compression
|
|
|
575137 |
- sshd_disable_gssapi_auth
|
|
|
575137 |
- sshd_disable_kerb_auth
|
|
|
575137 |
- - sshd_disable_rhosts_rsa
|
|
|
575137 |
- sshd_disable_rhosts
|
|
|
575137 |
- sshd_disable_user_known_hosts
|
|
|
575137 |
- sshd_do_not_permit_user_env
|
|
|
575137 |
diff --git a/rhel8/profiles/ospp.profile b/rhel8/profiles/ospp.profile
|
|
|
575137 |
index 9ecd2e90e5..9480206d89 100644
|
|
|
575137 |
--- a/rhel8/profiles/ospp.profile
|
|
|
575137 |
+++ b/rhel8/profiles/ospp.profile
|
|
|
575137 |
@@ -67,7 +67,6 @@ selections:
|
|
|
575137 |
- disable_host_auth
|
|
|
575137 |
- sshd_disable_gssapi_auth
|
|
|
575137 |
- sshd_disable_kerb_auth
|
|
|
575137 |
- - sshd_disable_rhosts_rsa
|
|
|
575137 |
- sshd_disable_rhosts
|
|
|
575137 |
- sshd_disable_user_known_hosts
|
|
|
575137 |
- var_accounts_passwords_pam_faillock_deny=3
|