Project

General

Profile

Task #163

Updated by Nawan about 17 hours ago

Here is some ideas for hardening SSH: 

 * ~~Disable `X11 Forwarding`~~ 
 * ~~Disable `PermitRootLogin`. Always `sudo`~~ 
 * ~~Disable `PasswordAuthentication`~~ 
 * ~~Disable weak ciphers~~ 
 * Limit user/group who can use SSH 

 This is not an exhaustive list, and more items may be added later.

Back