[PATCH v2] [shared] Allow comments in sshd config directives, support only lowercase sshd config values (yes/no)

Jan Lieskovsky jlieskov at redhat.com
Mon Apr 14 17:14:06 UTC 2014


Patch summary:
  * provide v2 of the patch to support trailing comments after
    various directives in / from /etc/ssh/sshd_config - based on feedback from:
    https://lists.fedorahosted.org/pipermail/scap-security-guide/2014-April/005185.html

  * add end terminator for "case-insensitive" regex match for cases
    where appropriate

    (e.g. "PermitRootLogin Yes" is not allowed, since sshd allows just
    directive names to be case-insensitive. Can be verified by attempt
    to start sshd with such config.)

  * update versions & test attestations

Testing report:
  * all changed files / directives has been tested on RHEL-6 for both cases
    (with / without trailing comments) and generate same results in particular
    configuration (IOW it's irrelevant if the comment is there or not)

Please review.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-shared-Allow-comments-in-sshd-config-directives-supp.patch
Type: text/x-patch
Size: 14366 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140414/6126d5b5/attachment.bin>


More information about the scap-security-guide mailing list