From 0bb65a25be9f3ee7993daf46f60edf95053fcefe Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Tue, 23 Jan 2024 21:28:25 +0100 Subject: sshd: disable umac-64 based macs from serer mac list --- roles/core/sshd/base/tasks/main.yml | 1 + 1 file changed, 1 insertion(+) (limited to 'roles/core') diff --git a/roles/core/sshd/base/tasks/main.yml b/roles/core/sshd/base/tasks/main.yml index 9793d831..87cd9a29 100644 --- a/roles/core/sshd/base/tasks/main.yml +++ b/roles/core/sshd/base/tasks/main.yml @@ -32,6 +32,7 @@ PasswordAuthentication: "{{ sshd_password_auth | ternary('yes', 'no') }}" PermitEmptyPasswords: "no" UseDNS: "no" + MACs: "-umac-64@openssh.com,umac-64-etm@openssh.com" loop: "{{ sshd_options | dict2items }}" loop_control: label: "{{ item.key }} = {{ item.value }}" -- cgit v1.2.3