La Couronne de Cuivre

Code : Tout sélectionner

diff --side-by-side /etc/ssh/sshd_config /etc/ssh/sshd_config.ucf-old

Code : Tout sélectionner

							      >	#	$OpenBSD: sshd_config,v 1.103 2018/04/09 20:41:22 tj 

# This is the sshd server system-wide configuration file.  Se	# This is the sshd server system-wide configuration file.  Se
# sshd_config(5) for more information.				# sshd_config(5) for more information.

# This sshd was compiled with PATH=/usr/local/bin:/usr/bin:/b |	# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/s

# The strategy used for options in the default sshd_config sh	# The strategy used for options in the default sshd_config sh
# OpenSSH is to specify options with their default value wher	# OpenSSH is to specify options with their default value wher
# possible, but leave them commented.  Uncommented options ov	# possible, but leave them commented.  Uncommented options ov
# default value.						# default value.

Include /etc/ssh/sshd_config.d/*.conf				Include /etc/ssh/sshd_config.d/*.conf

#Port 22							#Port 22
#AddressFamily any						#AddressFamily any
#ListenAddress 0.0.0.0						#ListenAddress 0.0.0.0
#ListenAddress ::						#ListenAddress ::

#HostKey /etc/ssh/ssh_host_rsa_key				#HostKey /etc/ssh/ssh_host_rsa_key
#HostKey /etc/ssh/ssh_host_ecdsa_key				#HostKey /etc/ssh/ssh_host_ecdsa_key
#HostKey /etc/ssh/ssh_host_ed25519_key				#HostKey /etc/ssh/ssh_host_ed25519_key

# Ciphers and keying						# Ciphers and keying
#RekeyLimit default none					#RekeyLimit default none

# Logging							# Logging
#SyslogFacility AUTH						#SyslogFacility AUTH
#LogLevel INFO							#LogLevel INFO

# Authentication:						# Authentication:

#LoginGraceTime 2m						#LoginGraceTime 2m
#PermitRootLogin prohibit-password				#PermitRootLogin prohibit-password
#StrictModes yes						#StrictModes yes
#MaxAuthTries 6							#MaxAuthTries 6
#MaxSessions 10							#MaxSessions 10

#PubkeyAuthentication yes					#PubkeyAuthentication yes

# Expect .ssh/authorized_keys2 to be disregarded by default i	# Expect .ssh/authorized_keys2 to be disregarded by default i
#AuthorizedKeysFile	.ssh/authorized_keys .ssh/authorized_	#AuthorizedKeysFile	.ssh/authorized_keys .ssh/authorized_

#AuthorizedPrincipalsFile none					#AuthorizedPrincipalsFile none

#AuthorizedKeysCommand none					#AuthorizedKeysCommand none
#AuthorizedKeysCommandUser nobody				#AuthorizedKeysCommandUser nobody

# For this to work you will also need host keys in /etc/ssh/s	# For this to work you will also need host keys in /etc/ssh/s
#HostbasedAuthentication no					#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for	# Change to yes if you don't trust ~/.ssh/known_hosts for
# HostbasedAuthentication					# HostbasedAuthentication
#IgnoreUserKnownHosts no					#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files		# Don't read the user's ~/.rhosts and ~/.shosts files
#IgnoreRhosts yes						#IgnoreRhosts yes

# To disable tunneled clear text passwords, change to no here	# To disable tunneled clear text passwords, change to no here
#PasswordAuthentication yes				      |	#PasswordAuthentication no
#PermitEmptyPasswords no					#PermitEmptyPasswords no

# Change to yes to enable challenge-response passwords (bewar	# Change to yes to enable challenge-response passwords (bewar
# some PAM modules and threads)					# some PAM modules and threads)
KbdInteractiveAuthentication no				      |	ChallengeResponseAuthentication no

# Kerberos options						# Kerberos options
#KerberosAuthentication no					#KerberosAuthentication no
#KerberosOrLocalPasswd yes					#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes					#KerberosTicketCleanup yes
#KerberosGetAFSToken no						#KerberosGetAFSToken no

# GSSAPI options						# GSSAPI options
#GSSAPIAuthentication no					#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes					#GSSAPICleanupCredentials yes
#GSSAPIStrictAcceptorCheck yes					#GSSAPIStrictAcceptorCheck yes
#GSSAPIKeyExchange no						#GSSAPIKeyExchange no

# Set this to 'yes' to enable PAM authentication, account pro	# Set this to 'yes' to enable PAM authentication, account pro
# and session processing. If this is enabled, PAM authenticat	# and session processing. If this is enabled, PAM authenticat
# be allowed through the KbdInteractiveAuthentication and     |	# be allowed through the ChallengeResponseAuthentication and
# PasswordAuthentication.  Depending on your PAM configuratio	# PasswordAuthentication.  Depending on your PAM configuratio
# PAM authentication via KbdInteractiveAuthentication may byp |	# PAM authentication via ChallengeResponseAuthentication may 
# the setting of "PermitRootLogin without-password".		# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run 	# If you just want the PAM account and session checks to run 
# PAM authentication, then enable this but set PasswordAuthen	# PAM authentication, then enable this but set PasswordAuthen
# and KbdInteractiveAuthentication to 'no'.		      |	# and ChallengeResponseAuthentication to 'no'.
UsePAM yes							UsePAM yes

#AllowAgentForwarding yes					#AllowAgentForwarding yes
#AllowTcpForwarding yes						#AllowTcpForwarding yes
#GatewayPorts no						#GatewayPorts no
X11Forwarding yes						X11Forwarding yes
#X11DisplayOffset 10						#X11DisplayOffset 10
#X11UseLocalhost yes						#X11UseLocalhost yes
#PermitTTY yes							#PermitTTY yes
PrintMotd no							PrintMotd no
#PrintLastLog yes						#PrintLastLog yes
#TCPKeepAlive yes						#TCPKeepAlive yes
#PermitUserEnvironment no					#PermitUserEnvironment no
#Compression delayed						#Compression delayed
#ClientAliveInterval 0						#ClientAliveInterval 0
#ClientAliveCountMax 3						#ClientAliveCountMax 3
#UseDNS no							#UseDNS no
#PidFile /run/sshd.pid					      |	#PidFile /var/run/sshd.pid
#MaxStartups 10:30:100						#MaxStartups 10:30:100
#PermitTunnel no						#PermitTunnel no
#ChrootDirectory none						#ChrootDirectory none
#VersionAddendum none						#VersionAddendum none

# no default banner path					# no default banner path
#Banner none							#Banner none

# Allow client to pass locale environment variables		# Allow client to pass locale environment variables
AcceptEnv LANG LC_*						AcceptEnv LANG LC_*

# override default of no subsystems				# override default of no subsystems
Subsystem	sftp	/usr/lib/openssh/sftp-server		Subsystem	sftp	/usr/lib/openssh/sftp-server

# Example of overriding settings on a per-user basis		# Example of overriding settings on a per-user basis
#Match User anoncvs						#Match User anoncvs
#	X11Forwarding no					#	X11Forwarding no
#	AllowTcpForwarding no					#	AllowTcpForwarding no
#	PermitTTY no						#	PermitTTY no
#	ForceCommand cvs server					#	ForceCommand cvs server

Code : Tout sélectionner

diff /etc/ssh/sshd_config /etc/ssh/sshd_config.ucf-old

Code : Tout sélectionner

0a1
> #     $OpenBSD: sshd_config,v 1.103 2018/04/09 20:41:22 tj Exp $
5c6
< # This sshd was compiled with PATH=/usr/local/bin:/usr/bin:/bin:/usr/games
---
> # This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
57c58
< #PasswordAuthentication yes
---
> #PasswordAuthentication no
62c63
< KbdInteractiveAuthentication no
---
> ChallengeResponseAuthentication no
78c79
< # be allowed through the KbdInteractiveAuthentication and
---
> # be allowed through the ChallengeResponseAuthentication and
80c81
< # PAM authentication via KbdInteractiveAuthentication may bypass
---
> # PAM authentication via ChallengeResponseAuthentication may bypass
84c85
< # and KbdInteractiveAuthentication to 'no'.
---
> # and ChallengeResponseAuthentication to 'no'.
102c103
< #PidFile /run/sshd.pid
---
> #PidFile /var/run/sshd.pid

Code : Tout sélectionner

diff /etc/ssh/sshd_config /etc/ssh/sshd_config.ucf-old | sed --silent 's/^> \(.*\)/\1/p'

Code : Tout sélectionner

#       $OpenBSD: sshd_config,v 1.103 2018/04/09 20:41:22 tj Exp $
# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
#PasswordAuthentication no
ChallengeResponseAuthentication no
# be allowed through the ChallengeResponseAuthentication and
# PAM authentication via ChallengeResponseAuthentication may bypass
# and ChallengeResponseAuthentication to 'no'.
#PidFile /var/run/sshd.pid

Code : Tout sélectionner

body {
	font-family: verdana, geneva, lucida, "lucida grande", arial, helvetica, Sans-serif;
	font-size: 10px;
	line-height: normal;
	margin: 0;
	padding: 12px 0;
	word-wrap: break-word;
	-webkit-print-color-adjust: exact;
}

Code : Tout sélectionner

body {
	font-family: Verdana, Helvetica, Arial, sans-serif;
	font-size: 10px;
	line-height: normal;
	margin: 0;
	padding: 12px 0;
	word-wrap: break-word;
	-webkit-print-color-adjust: exact;
}

Code : Tout sélectionner

	font-family: verdana, geneva, lucida, "lucida grande", arial, helvetica, Sans-serif;