diff options
| author | neutralrockets <ovenmit28@gmail.com> | 2014-06-11 01:11:50 +1000 |
|---|---|---|
| committer | neutralrockets <ovenmit28@gmail.com> | 2014-06-11 01:11:50 +1000 |
| commit | 0c467e074f983598e59936e2ca5f6db0a26d5e49 (patch) | |
| tree | 28b75f377748a6470a7d700b9c89576525878732 /templates | |
| parent | 02c409c36bd2d204d90bf540cbbb87d6908d5801 (diff) | |
| download | vyatta-cfg-system-0c467e074f983598e59936e2ca5f6db0a26d5e49.tar.gz vyatta-cfg-system-0c467e074f983598e59936e2ca5f6db0a26d5e49.zip | |
Add support for ciphers and macs override in ssh
Add support to override default Ciphers and MACs options in SSH server
for eg:
set service ssh ciphers <list of ciphers>
set service ssh macs <list of macs>
Diffstat (limited to 'templates')
| -rw-r--r-- | templates/service/ssh/ciphers/node.def | 10 | ||||
| -rw-r--r-- | templates/service/ssh/macs/node.def | 10 |
2 files changed, 20 insertions, 0 deletions
diff --git a/templates/service/ssh/ciphers/node.def b/templates/service/ssh/ciphers/node.def new file mode 100644 index 00000000..0ab5fb8f --- /dev/null +++ b/templates/service/ssh/ciphers/node.def @@ -0,0 +1,10 @@ +type: txt +help: Specifies the ciphers allowed for protocol version 2. Multiple ciphers must be comma-separated. See 'man sshd_config' for supported ciphers. + +create: sudo sed -i -e '$ a \ +Ciphers $VAR(@)' /etc/ssh/sshd_config + +delete: sudo sed -i -e '/^Ciphers $VAR(@)$/d' /etc/ssh/sshd_config + +update: sudo sed -i -e '/^Ciphers/c \ +Ciphers $VAR(@)' /etc/ssh/sshd_config
\ No newline at end of file diff --git a/templates/service/ssh/macs/node.def b/templates/service/ssh/macs/node.def new file mode 100644 index 00000000..ee6c60e1 --- /dev/null +++ b/templates/service/ssh/macs/node.def @@ -0,0 +1,10 @@ +type: txt +help: Specifies the available MAC (message authentication code) algorithms. The MAC algorithm is used in protocol version 2 for data integrity protection. Multiple algorithms must be comma-separated. See 'man sshd_config' for supported MACs. + +create: sudo sed -i -e '$ a \ +MACs $VAR(@)' /etc/ssh/sshd_config + +delete: sudo sed -i -e '/^MACs $VAR(@)$/d' /etc/ssh/sshd_config + +update: sudo sed -i -e '/^MACs/c \ +MACs $VAR(@)' /etc/ssh/sshd_config
\ No newline at end of file |