smeserver/smeserver-openssh
6
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

* Sat Mar 22 2025 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-12.sme

Browse Source 
- insecure cipher and MAC removed [SME: 12968]
This commit is contained in:
Jean-Philippe Pialasse 2025-03-22 17:44:56 -04:00
parent add4e66024
commit 4dc55725a6
5 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
root/etc/e-smith/templates/etc/ssh/sshd_config/29HostKeyAlgorithms Normal file
View File

@ -0,0 +1 @@
HostKeyAlgorithms ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256

2
root/etc/e-smith/templates/etc/ssh/sshd_config/30KexAlgorithms
View File

@ -1 +1 @@
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha256

2
root/etc/e-smith/templates/etc/ssh/sshd_config/33MACs
View File

@ -1 +1 @@
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com

4
root/usr/lib/systemd/system/sshd.service.d/50-koozali.conf
View File

@ -1,4 +1,8 @@
[Service]
# could introduce security issues
# EnvironmentFile=-/etc/crypto-policies/back-ends/opensshserver.config
EnvironmentFile=
EnvironmentFile=-/etc/sysconfig/sshd
ExecStartPre=/sbin/e-smith/service-status sshd
ExecStartPre=/sbin/e-smith/systemd/sshd-prepare
ExecStartPre=-/sbin/e-smith/expand-template /etc/ssh/sshd_config

5
smeserver-openssh.spec
View File

@ -4,7 +4,7 @@ Summary: smeserver module to configure and enable ssh
%define name smeserver-openssh
Name: %{name}
%define version 11.0.0
%define release 11
%define release 12
Version: %{version}
Release: %{release}%{?dist}
License: GPL
@ -63,6 +63,9 @@ if [ $1 -gt 1 ] ; then
fi
%changelog
* Sat Mar 22 2025 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-12.sme
- insecure cipher and MAC removed [SME: 12968]
* Wed Jan 15 2025 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-11.sme
- remove Requires: runit [SME: 12566]