FS#7030 - openssh - modify default ssh_config to reduce worm behavior impact

Attached to Project: Arch Linux
Opened by eliott (cactus) - Sunday, 29 April 2007, 21:36 GMT
Last edited by Tobias Powalowski (tpowa) - Sunday, 27 May 2007, 07:59 GMT
Task Type Feature Request
Category Packages: Current
Status Closed
Assigned To Tobias Powalowski (tpowa)
Architecture All
Severity Low
Priority Normal
Reported Version 0.8 Voodoo
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

/etc/ssh_config should be modified to hash the known_hosts host entries. Many distributions set this by default.

For an explanation...
https://itso.iu.edu/Hashing_the_OpenSSH_known__hosts_File

Also recommend setting StrictHostKeyChecking to "ask".
   ssh_config.patch (0.5 KiB)
This task depends upon

Closed by  Tobias Powalowski (tpowa)
Sunday, 27 May 2007, 07:59 GMT
Reason for closing:  Fixed
Comment by Tobias Powalowski (tpowa) - Sunday, 06 May 2007, 09:22 GMT
HOST * was in there by accident?
Comment by eliott (cactus) - Monday, 07 May 2007, 04:06 GMT
No. the host line is required.
Those options are only then applied to all hosts.

Loading...