New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cleanup sshd config #3979

Closed
emkll opened this Issue Dec 10, 2018 · 0 comments

Comments

Projects
None yet
2 participants
@emkll
Copy link
Contributor

emkll commented Dec 10, 2018

Description

As part of the removal of 2FA for interactive logins #3247, further cleanup is required for the sshd configuration on SecureDrop instances:

  1. ChallengeResponseAuthentication is no longer required, as it was necessary for the 2FA PAM module.
  2. UsePAM is no longer required, as no other PAM modules are used
  3. PasswordAuthentication should be set to no (ChallengeResponseAuthetnication set to yes would override PasswordAuthentication set to no)

@emkll emkll referenced this issue Dec 10, 2018

Merged

Remove unused sshd config options #3980

2 of 9 tasks complete

@emkll emkll closed this in #3980 Dec 10, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment