Everbrent/cis
8
0
Fork 0
mirror of https://github.com/m8tin/cis.git synced 2026-04-02 19:01:30 +02:00
Code Issues Packages Projects Releases Wiki Activity

Restrict ssh access to memebers of group ssh_login

Browse Source
This commit is contained in:
m8in
2026-03-03 22:19:27 +01:00
parent 88acbffbd0
commit abcb324283
4 changed files with 61 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
core/default/etc/ssh/sshd_config.d/AccessRestriction.conf Normal file
View File

@@ -0,0 +1,10 @@
# Allows user 'root' to use ssh always.
# This should prevent lockout because access is allowed without group membership.
# For details see: https://serverfault.com/questions/617081/how-to-use-both-allowgroups-and-allowusers-in-sshd-config
AllowUsers root
# 1. Create custom group 'ssh_login' of type system if not exist:
# - addgroup --system "ssh_login"
# 2. Additionally allow users of group 'ssh_login' to use ssh only:
# - adduser "${USER}" "ssh_login"
Match group ssh_login
AllowUsers *