void-packages/srcpkgs/openssh/patches/sshd_config.patch
2025-04-12 15:22:19 +02:00

41 lines
1.2 KiB
Diff

--- a/sshd_config
+++ b/sshd_config
@@ -10,6 +10,11 @@
# possible, but leave them commented. Uncommented options override the
# default value.
+# To avoid conflicts with the packaged configuration, specify custom options
+# in drop-in files under /etc/ssh/sshd_config.d to override any defaults or
+# options set below.
+Include /etc/ssh/sshd_config.d/*.conf
+
#Port 22
#AddressFamily any
#ListenAddress 0.0.0.0
@@ -60,7 +65,7 @@
# Change to "no" to disable keyboard-interactive authentication. Depending on
# the system's configuration, this may involve passwords, challenge-response,
# one-time passwords or some combination of these and other methods.
-#KbdInteractiveAuthentication yes
+KbdInteractiveAuthentication no
# Kerberos options
#KerberosAuthentication no
@@ -81,7 +86,7 @@
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and KbdInteractiveAuthentication to 'no'.
-#UsePAM no
+UsePAM yes
#AllowAgentForwarding yes
#AllowTcpForwarding yes
@@ -90,7 +95,7 @@
#X11DisplayOffset 10
#X11UseLocalhost yes
#PermitTTY yes
-#PrintMotd yes
+PrintMotd no
#PrintLastLog yes
#TCPKeepAlive yes
#PermitUserEnvironment no