|
@@ -156,6 +156,8 @@ echo -e "\e[1;33;4;44mPassword for the user root: $pwdRoot\e[0m"
|
|
|
# Harden SSHD
|
|
|
sed -i -e 's/#Port 22/Port 50101/g' /etc/ssh/sshd_config
|
|
|
sed -i -e 's/#PubkeyAuthentication yes/PubkeyAuthentication yes/g' /etc/ssh/sshd_config
|
|
|
+# https://infosec.mozilla.org/guidelines/openssh.html
|
|
|
+
|
|
|
|
|
|
# Allow admin to sudo without password
|
|
|
echo AllowUsers admin >> /etc/ssh/sshd_config
|