particle-os/debian-forge-composer
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

distro/rhel90: disable pw auth for EC2 images

Browse source 
Disable loging in via password authentication since this is an
official Amazon marketplace requirement

  Linux-based AMIs must not allow SSH password authentication.
  Disable password authentication via your sshd_config file by
  setting PasswordAuthentication to NO.

  Section "Security policies" from
  https://docs.aws.amazon.com/marketplace/latest/userguide/product-and-ami-policies.html
This commit is contained in:
Christian Kellner 2022-01-28 16:11:17 +00:00 • committed by Tomáš Hozza
parent 90cebf0337
commit 9302befa67
8 changed files with 57 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
test/data/manifests/rhel_90-aarch64-ami-boot.json
View file

@ -977,6 +977,14 @@
"profile": "sssd"
}
},
{
"type": "org.osbuild.sshd.config",
"options": {
"config": {
"PasswordAuthentication": false
}
}
},
{
"type": "org.osbuild.fstab",
"options": {

8
test/data/manifests/rhel_90-aarch64-ec2-boot.json
View file

@ -991,6 +991,14 @@
"profile": "sssd"
}
},
{
"type": "org.osbuild.sshd.config",
"options": {
"config": {
"PasswordAuthentication": false
}
}
},
{
"type": "org.osbuild.fstab",
"options": {

8
test/data/manifests/rhel_90-x86_64-ami-boot.json
View file

@ -972,6 +972,14 @@
"profile": "sssd"
}
},
{
"type": "org.osbuild.sshd.config",
"options": {
"config": {
"PasswordAuthentication": false
}
}
},
{
"type": "org.osbuild.fstab",
"options": {

8
test/data/manifests/rhel_90-x86_64-ec2-boot.json
View file

@ -988,6 +988,14 @@
"profile": "sssd"
}
},
{
"type": "org.osbuild.sshd.config",
"options": {
"config": {
"PasswordAuthentication": false
}
}
},
{
"type": "org.osbuild.fstab",
"options": {

8
test/data/manifests/rhel_90-x86_64-ec2_ha-boot.json
View file

@ -1182,6 +1182,14 @@
"profile": "sssd"
}
},
{
"type": "org.osbuild.sshd.config",
"options": {
"config": {
"PasswordAuthentication": false
}
}
},
{
"type": "org.osbuild.fstab",
"options": {

8
test/data/manifests/rhel_90-x86_64-ec2_sap-boot.json
View file

@ -1353,6 +1353,14 @@
]
}
},
{
"type": "org.osbuild.sshd.config",
"options": {
"config": {
"PasswordAuthentication": false
}
}
},
{
"type": "org.osbuild.fstab",
"options": {