diff options
| author | Daniil Baturin <daniil@baturin.org> | 2014-06-10 22:35:11 +0700 |
|---|---|---|
| committer | Daniil Baturin <daniil@baturin.org> | 2014-06-10 22:35:11 +0700 |
| commit | a4a8cf91654da86dbfd66c722b9b3d201e74af9b (patch) | |
| tree | 28b75f377748a6470a7d700b9c89576525878732 | |
| parent | 02c409c36bd2d204d90bf540cbbb87d6908d5801 (diff) | |
| parent | 0c467e074f983598e59936e2ca5f6db0a26d5e49 (diff) | |
| download | vyatta-cfg-system-a4a8cf91654da86dbfd66c722b9b3d201e74af9b.tar.gz vyatta-cfg-system-a4a8cf91654da86dbfd66c722b9b3d201e74af9b.zip | |
Merge pull request #14 from neutralrockets/helium
Add support for ciphers and macs override in ssh
| -rw-r--r-- | templates/service/ssh/ciphers/node.def | 10 | ||||
| -rw-r--r-- | templates/service/ssh/macs/node.def | 10 |
2 files changed, 20 insertions, 0 deletions
diff --git a/templates/service/ssh/ciphers/node.def b/templates/service/ssh/ciphers/node.def new file mode 100644 index 00000000..0ab5fb8f --- /dev/null +++ b/templates/service/ssh/ciphers/node.def @@ -0,0 +1,10 @@ +type: txt +help: Specifies the ciphers allowed for protocol version 2. Multiple ciphers must be comma-separated. See 'man sshd_config' for supported ciphers. + +create: sudo sed -i -e '$ a \ +Ciphers $VAR(@)' /etc/ssh/sshd_config + +delete: sudo sed -i -e '/^Ciphers $VAR(@)$/d' /etc/ssh/sshd_config + +update: sudo sed -i -e '/^Ciphers/c \ +Ciphers $VAR(@)' /etc/ssh/sshd_config
\ No newline at end of file diff --git a/templates/service/ssh/macs/node.def b/templates/service/ssh/macs/node.def new file mode 100644 index 00000000..ee6c60e1 --- /dev/null +++ b/templates/service/ssh/macs/node.def @@ -0,0 +1,10 @@ +type: txt +help: Specifies the available MAC (message authentication code) algorithms. The MAC algorithm is used in protocol version 2 for data integrity protection. Multiple algorithms must be comma-separated. See 'man sshd_config' for supported MACs. + +create: sudo sed -i -e '$ a \ +MACs $VAR(@)' /etc/ssh/sshd_config + +delete: sudo sed -i -e '/^MACs $VAR(@)$/d' /etc/ssh/sshd_config + +update: sudo sed -i -e '/^MACs/c \ +MACs $VAR(@)' /etc/ssh/sshd_config
\ No newline at end of file |