[PATCH] [Fedora] Fix remediation for sshd set keepalive (ClientAliveCountMax) and move it to /shared

Jan Lieskovsky jlieskov at redhat.com
Fri Dec 20 14:13:37 UTC 2013


Attached patch fixes remediation script for sshd set
keepalive (ClientAliveCountMax) rule, since it has been
reported to cause issues:
  [1] https://lists.fedorahosted.org/pipermail/scap-security-guide/2013-December/004715.html

when Match block present in sshd config and moves it
to /shared fixes directory.

Tests succeeded for all four (sub)cases:
* no ClientAliveCountMax and no Match block
* ClientAliveCountMax already present, no Match block
* ClientAliveCountMax not present, Match block present
* both of ClientAliveCountMax and Match block directives present

in sshd config.

Pushed to master.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fedora-Fix-remediation-for-sshd-set-keepalive-Client.patch
Type: text/x-patch
Size: 5296 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131220/5e6de303/attachment-0001.bin>


More information about the scap-security-guide mailing list