[PATCH v2] [shared] Allow comments in sshd config directives, support only lowercase sshd config values (yes/no)
by Jan Lieskovsky
Patch summary:
* provide v2 of the patch to support trailing comments after
various directives in / from /etc/ssh/sshd_config - based on feedback from:
https://lists.fedorahosted.org/pipermail/scap-security-guide/2014-April/0...
* add end terminator for "case-insensitive" regex match for cases
where appropriate
(e.g. "PermitRootLogin Yes" is not allowed, since sshd allows just
directive names to be case-insensitive. Can be verified by attempt
to start sshd with such config.)
* update versions & test attestations
Testing report:
* all changed files / directives has been tested on RHEL-6 for both cases
(with / without trailing comments) and generate same results in particular
configuration (IOW it's irrelevant if the comment is there or not)
Please review.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
10 years