Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2024-10-01 00:55:42 -04:00
Code Issues Packages Projects Releases Wiki Activity
106 Commits 1 Branch 0 Tags 1.8 MiB
337647c5a9
Commit Graph

12 Commits

Author SHA1 Message Date
Daniel Micay
e5f576c062 sshd: reduce MaxAuthTries to 1 2022-07-22 20:00:52 -04:00
Daniel Micay
84ca6bfa27 sshd: sntrup761x25519-sha512@openssh.com kex only 2022-07-22 19:55:59 -04:00
Daniel Micay
d7c23eac02 disable unused AES-GCM cipher suites 2022-07-22 19:11:28 -04:00
Daniel Micay
1a195570c8 sshd: disable unused agent forwarding feature 
This is a misguided feature and while this doesn't meaningfully reduce
attack surface, it makes sense not to enable it.
 2022-07-11 19:57:42 -04:00
Daniel Micay
f1005cf339 user-based whitelist for ssh access 2021-11-27 20:33:48 -05:00
Daniel Micay
87db85274a sshd: raise MaxStartups to 4096 2021-09-06 02:42:22 -04:00
Daniel Micay
c315170cd6 sshd: reduce MaxAuthTries to 2 2021-09-06 02:38:16 -04:00
Daniel Micay
f56f094c97 sshd: limit per-source max startups to 1 2021-09-06 02:38:08 -04:00
Daniel Micay
43681fa913 sshd: reduce LoginGraceTime to 15s 2021-09-06 02:38:06 -04:00
Daniel Micay
613251176d explicitly disable all standalone MACs (AEAD only) 2021-08-23 09:23:16 -04:00
Daniel Micay
566a7e2ccb update to OpenSSH 8.7 2021-08-23 02:37:28 -04:00
Daniel Micay
d24d24926a add subset of shared configuration files 2021-07-28 08:23:04 -04:00