[PATCH v2] [shared] Allow comments in sshd config directives, support only lowercase sshd config values (yes/no)
Jan Lieskovsky
jlieskov at redhat.com
Mon Apr 14 17:14:06 UTC 2014
Patch summary:
* provide v2 of the patch to support trailing comments after
various directives in / from /etc/ssh/sshd_config - based on feedback from:
https://lists.fedorahosted.org/pipermail/scap-security-guide/2014-April/005185.html
* add end terminator for "case-insensitive" regex match for cases
where appropriate
(e.g. "PermitRootLogin Yes" is not allowed, since sshd allows just
directive names to be case-insensitive. Can be verified by attempt
to start sshd with such config.)
* update versions & test attestations
Testing report:
* all changed files / directives has been tested on RHEL-6 for both cases
(with / without trailing comments) and generate same results in particular
configuration (IOW it's irrelevant if the comment is there or not)
Please review.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-shared-Allow-comments-in-sshd-config-directives-supp.patch
Type: text/x-patch
Size: 14366 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140414/6126d5b5/attachment.bin>
More information about the scap-security-guide
mailing list