User Tools

Site Tools


linux:linux-hardening:ssh_configuration

Secure Server Build

SSH Configuration

The table below gives the list of sshd parameters that must be set in /etc/ssh/sshd_config

Protocol 2
LogLevel VERBOSE
X11Forwarding no
MaxAuthTries 4
IgnoreRhosts yes
HostbasedAuthentication no
PermitRootLogin no
PermitEmptyPasswords no
PermitUserEnvironment no
Cipher aes128-ctr, aes192-ctr, aes256-ctr
ClientAliveInterval 300
ClientAliveCountMax 0
Allowusers <list> 
banner <bannerfile>

NOTE I don't have a Allowuser list or a banner file!

linux/linux-hardening/ssh_configuration.txt · Last modified: by 127.0.0.1