disable the debian/ubuntu package version from being sent to clients

2015-05-22 16:37:03 -07:00 · 2015-05-22 16:37:03 -07:00 · b682edaae3
commit b682edaae3
parent e60fb9a027
6 changed files with 12 additions and 0 deletions
--- a/templates/sshd_config/Debian_jessie.erb
+++ b/templates/sshd_config/Debian_jessie.erb
@ -83,6 +83,8 @@ TCPKeepAlive yes

 #MaxStartups 10:30:60
 #Banner /etc/issue.net
+# do not reveal debian version (default is yes)
+DebianBanner no

 # Allow client to pass locale environment variables
 AcceptEnv LANG LC_*
--- a/templates/sshd_config/Debian_sid.erb
+++ b/templates/sshd_config/Debian_sid.erb
@ -83,6 +83,8 @@ TCPKeepAlive yes

 #MaxStartups 10:30:60
 #Banner /etc/issue.net
+# do not reveal debian version (default is yes)
+DebianBanner no

 # Allow client to pass locale environment variables
 AcceptEnv LANG LC_*
--- a/templates/sshd_config/Debian_squeeze.erb
+++ b/templates/sshd_config/Debian_squeeze.erb
@ -87,6 +87,8 @@ TCPKeepAlive yes

 #MaxStartups 10:30:60
 #Banner /etc/issue.net
+# do not reveal debian version (default is yes)
+DebianBanner no

 # Allow client to pass locale environment variables
 AcceptEnv LANG LC_*
--- a/templates/sshd_config/Debian_wheezy.erb
+++ b/templates/sshd_config/Debian_wheezy.erb
@ -86,6 +86,8 @@ TCPKeepAlive yes

 #MaxStartups 10:30:60
 #Banner /etc/issue.net
+# do not reveal debian version (default is yes)
+DebianBanner no

 # Allow client to pass locale environment variables
 AcceptEnv LANG LC_*
--- a/templates/sshd_config/Ubuntu.erb
+++ b/templates/sshd_config/Ubuntu.erb
@ -87,6 +87,8 @@ TCPKeepAlive yes

 #MaxStartups 10:30:60
 #Banner /etc/issue.net
+# do not reveal debian version (default is yes)
+DebianBanner no

 # Allow client to pass locale environment variables
 AcceptEnv LANG LC_*
--- a/templates/sshd_config/Ubuntu_lucid.erb
+++ b/templates/sshd_config/Ubuntu_lucid.erb
@ -88,6 +88,8 @@ KeepAlive yes

 #MaxStartups 10:30:60
 #Banner /etc/issue.net
+# do not reveal debian version (default is yes)
+DebianBanner no
 #ReverseMappingCheck yes

 Subsystem      sftp    <%= (s=scope.lookupvar('::sshd::sftp_subsystem')).empty? ? '/usr/lib/openssh/sftp-server' : s %>