aboutsummaryrefslogtreecommitdiffstats
path: root/charms/trusty/ceilometer/charmhelpers/contrib/hardening/defaults/ssh.yaml
diff options
context:
space:
mode:
authorStuart Mackie <wsmackie@juniper.net>2017-03-23 06:19:54 -0700
committerStuart Mackie <wsmackie@juniper.net>2017-03-23 06:19:54 -0700
commit88df88a19674ccc0017836941b8ee32eaadf19fb (patch)
treef930c90f75846ec8d8e33cf27325ff8fafc85d5c /charms/trusty/ceilometer/charmhelpers/contrib/hardening/defaults/ssh.yaml
parent9f50a40437477432a21b326b15c343ca6b8fe516 (diff)
Deleted charms with wrong license. Will source them differently in future.
Change-Id: I0fc99ea03c6b6ca4701e63793cb2be60e56c7588 Signed-off-by: Stuart Mackie <wsmackie@juniper.net>
Diffstat (limited to 'charms/trusty/ceilometer/charmhelpers/contrib/hardening/defaults/ssh.yaml')
-rw-r--r--charms/trusty/ceilometer/charmhelpers/contrib/hardening/defaults/ssh.yaml49
1 files changed, 0 insertions, 49 deletions
diff --git a/charms/trusty/ceilometer/charmhelpers/contrib/hardening/defaults/ssh.yaml b/charms/trusty/ceilometer/charmhelpers/contrib/hardening/defaults/ssh.yaml
deleted file mode 100644
index cd529bc..0000000
--- a/charms/trusty/ceilometer/charmhelpers/contrib/hardening/defaults/ssh.yaml
+++ /dev/null
@@ -1,49 +0,0 @@
-# NOTE: this file contains the default configuration for the 'ssh' hardening
-# code. If you want to override any settings you must add them to a file
-# called hardening.yaml in the root directory of your charm using the
-# name 'ssh' as the root key followed by any of the following with new
-# values.
-
-common:
- service_name: 'ssh'
- network_ipv6_enable: False # (type:boolean)
- ports: [22]
- remote_hosts: []
-
-client:
- package: 'openssh-client'
- cbc_required: False # (type:boolean)
- weak_hmac: False # (type:boolean)
- weak_kex: False # (type:boolean)
- roaming: False
- password_authentication: 'no'
-
-server:
- host_key_files: ['/etc/ssh/ssh_host_rsa_key', '/etc/ssh/ssh_host_dsa_key',
- '/etc/ssh/ssh_host_ecdsa_key']
- cbc_required: False # (type:boolean)
- weak_hmac: False # (type:boolean)
- weak_kex: False # (type:boolean)
- allow_root_with_key: False # (type:boolean)
- allow_tcp_forwarding: 'no'
- allow_agent_forwarding: 'no'
- allow_x11_forwarding: 'no'
- use_privilege_separation: 'sandbox'
- listen_to: ['0.0.0.0']
- use_pam: 'no'
- package: 'openssh-server'
- password_authentication: 'no'
- alive_interval: '600'
- alive_count: '3'
- sftp_enable: False # (type:boolean)
- sftp_group: 'sftponly'
- sftp_chroot: '/home/%u'
- deny_users: []
- allow_users: []
- deny_groups: []
- allow_groups: []
- print_motd: 'no'
- print_last_log: 'no'
- use_dns: 'no'
- max_auth_tries: 2
- max_sessions: 10