sshd_config: Add updates from Xenial upstream.

It seems worth updating this to match the Linux distro this
configuration targets.
This commit is contained in:
Tim Abbott 2016-09-26 09:59:40 -07:00
parent 0a5a2c4eda
commit 73f54dd0cb
1 changed files with 4 additions and 2 deletions

View File

@ -10,12 +10,14 @@ Protocol 2
# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
#Privilege Separation is turned on for security
UsePrivilegeSeparation yes
# Lifetime and size of ephemeral version 1 server key
KeyRegenerationInterval 3600
ServerKeyBits 768
ServerKeyBits 1024
# Logging
SyslogFacility AUTH
@ -23,7 +25,7 @@ LogLevel INFO
# Authentication:
LoginGraceTime 120
PermitRootLogin without-password
PermitRootLogin prohibit-password
StrictModes yes
RSAAuthentication yes