Tomster/Linux-Setup-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/Linux-Setup-Scripts synced 2024-11-25 10:41:34 -05:00
Code

SSHD Configurations

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2022-09-17 20:41:18 -04:00
parent 76a5b64ad2
commit eb421d1fe4
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
RHEL-Server-9.sh
View File

@ -1,13 +1,15 @@
#!/bin/bash
#Assuming that you are using ANSSI-BP-028
mkdir -p /etc/ssh/ssh_config.d /etc/ssh/sshd_config.d
echo "GSSAPIAuthentication no" | sudo tee -a /etc/ssh/ssh_config.d/10-custom.conf
echo "X11Forwarding no
GSSAPIAuthentication no" | sudo tee -a /etc/ssh/sshd_config.d/10-custom.conf
echo "PasswordAuthentication no" | sudo tee /etc/ssh/sshd_config.d/40-disable-passwords.conf
sudo dnf install tuned -y
sudo tuned-adm profile virtual-guest
echo "X11Forwarding no" >> sudo tee -a /etc/ssh/sshd_config.d/10-custom.conf
echo "GSSAPIAuthentication no" >> sudo tee -a /etc/ssh/sshd_config.d/10-custom.conf
echo "GSSAPIAuthentication no" >> sudo tee -a /etc/ssh/ssh_config.d/10-custom.conf
sudo curl https://raw.githubusercontent.com/Whonix/security-misc/master/etc/modprobe.d/30_security-misc.conf -o /etc/modprobe.d/30_security-misc.conf
sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/sysctl.d/30_security-misc.conf -o /etc/sysctl.d/30_security-misc.conf
sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/sysctl.d/30_silent-kernel-printk.conf -o /etc/sysctl.d/30_silent-kernel-printk.conf