]> ruderich.org/simon Gitweb - config/dotfiles.git/commitdiff
ssh_config: Disable unused authentication methods.
authorSimon Ruderich <simon@ruderich.org>
Sun, 10 Mar 2013 14:36:11 +0000 (15:36 +0100)
committerSimon Ruderich <simon@ruderich.org>
Sun, 10 Mar 2013 14:36:11 +0000 (15:36 +0100)
ssh_config

index be03a42673df4647a24d8e075112a01054a201bc..379130f301b6e8590b11f30c81537f4a2a1f3dc4 100644 (file)
@@ -39,6 +39,15 @@ Host *
 # to local X11!
     ForwardX11Trusted no
 
+# Disable authentication methods I don't use.
+    ChallengeResponseAuthentication no
+    GSSAPIAuthentication no
+    HostbasedAuthentication no
+    KbdInteractiveAuthentication no
+# Only enable those I need.
+    PasswordAuthentication yes
+    PubkeyAuthentication yes
+
 # Abort if not all requested port forwardings can be set up.
     ExitOnForwardFailure yes