ISTI-ansible-roles
/
ansible-roles
4
0
Fork 3
Code Issues Pull Requests Releases Wiki Activity

Merge pull request 'sshd: add more limits to the 'sftp only' users.' (#177) from adellam/ansible-roles:master into master

This commit is contained in:
Andrea Dell'Amico 2020-04-10 18:13:01 +02:00
parent 7be7a60cbd 587faf5555
commit 6075a212bf
1 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
library/roles/sshd_config/templates/sshd_config.j2
View File

@ -96,12 +96,19 @@ AcceptEnv LANG LC_*
UsePAM {{ sshd_use_pam }} UsePAM {{ sshd_use_pam }}
{% if sshd_enable_sftp_subsystem %} {% if sshd_enable_sftp_subsystem %}
Subsystem sftp internal-sftp {% if ansible_distribution_file_variety == 'RedHat' %}
Subsystem sftp /usr/libexec/openssh/sftp-server
{% else %}
Subsystem sftp /usr/lib/openssh/sftp-server
{% endif %}
{% if sshd_enable_sftp_jail %} {% if sshd_enable_sftp_jail %}
Match Group {{ sshd_sftp_chroot_match_group }} Match Group {{ sshd_sftp_chroot_match_group }}
ChrootDirectory {{ sshd_sftp_chroot_directory }} ChrootDirectory {{ sshd_sftp_chroot_directory }}
X11Forwarding no ForceCommand {{ sshd_sftp_force_command }}
PermitTunnel no
AllowAgentForwarding no
AllowTcpForwarding no AllowTcpForwarding no
X11Forwarding no
{% endif %} {% endif %}
{% endif %} {% endif %}