mirror of
https://github.com/jtesta/ssh-audit.git
synced 2025-03-12 22:55:24 +01:00
b15664929f
* Move files for better setup.py packaging * Update setup.py and configs for src layout * Run tests on setup.py build In effect, this tests that the setup.py configuration is correct. coverage combine and coverage:paths are added to keep the displayed coverage paths as src/ssh_audit/*.py instead of .tox/$envname/**/site-packages/ssh_audit/*.py * Remove unnecessary encoding declarations Python 3 defaults to UTF-8 encoding. https://docs.python.org/3/reference/lexical_analysis.html#encoding-declarations * Remove shebang from colorama type stubs Shouldn't need to be an executable. Related: git has this file tracked as chmod -x.
25 lines
1.0 KiB
Plaintext
25 lines
1.0 KiB
Plaintext
#
|
|
# Official policy for hardened OpenSSH on Ubuntu Server 18.04 LTS.
|
|
#
|
|
|
|
name = "Hardened Ubuntu Server 18.04 LTS"
|
|
version = 1
|
|
|
|
# Group exchange DH modulus sizes.
|
|
dh_modulus_size_diffie-hellman-group-exchange-sha256 = 2048
|
|
|
|
# The host key types that must match exactly (order matters).
|
|
host keys = ssh-ed25519
|
|
|
|
# Host key types that may optionally appear.
|
|
optional host keys = ssh-ed25519-cert-v01@openssh.com, rsa-sha2-256-cert-v01@openssh.com, rsa-sha2-512-cert-v01@openssh.com
|
|
|
|
# The key exchange algorithms that must match exactly (order matters).
|
|
key exchanges = curve25519-sha256, curve25519-sha256@libssh.org, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha256
|
|
|
|
# The ciphers that must match exactly (order matters).
|
|
ciphers = chacha20-poly1305@openssh.com, aes256-gcm@openssh.com, aes128-gcm@openssh.com, aes256-ctr, aes192-ctr, aes128-ctr
|
|
|
|
# The MACs that must match exactly (order matters).
|
|
macs = hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, umac-128-etm@openssh.com
|